← back
CVE-2013-1727

CVE-2013-1727

EPSS 5.2%
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38766unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=782581http://www.mozilla.org/security/announce/2013/mfsa2013-84.html