VULNERABILITY INTELLIGENCE
CVE-2013-5611
CVSS score5.8 MEDIUM
EPSS probability2.14%
CISA KEVNot currently listed
Published2013-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P
Description
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
Primary references
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Issue Tracking