VULNERABILITY INTELLIGENCE

CVE-2013-0751

CVSS score5.8 MEDIUM
EPSS probability1.37%
CISA KEVNot currently listed
Published2013-01-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.

Primary references