VULNERABILITY INTELLIGENCE

CVE-2013-0794

CVSS score5.8 MEDIUM
EPSS probability1.06%
CISA KEVNot currently listed
Published2013-04-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.

Primary references