The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mozilla

Published: 2013-08-07T01:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2013-02-13T00:00:00


Link: CVE-2013-1714

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2013-08-07T01:55:04.963

Modified: 2017-09-19T01:36:12.590


Link: CVE-2013-1714

JSON object: View

cve-icon Redhat Information

No data.

CWE