CVE ID:	CVE-2013-1692
Description:	Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross- site request forgery (CSRF) attacks via a crafted web site.
Test IDs:	1.3.6.1.4.1.25623.1.2.1.2013.54
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1692 BugTraq ID: 60783 http://www.securityfocus.com/bid/60783 Debian Security Information: DSA-2716 (Google Search) http://www.debian.org/security/2013/dsa-2716 Debian Security Information: DSA-2720 (Google Search) http://www.debian.org/security/2013/dsa-2720 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17096 RedHat Security Advisories: RHSA-2013:0981 http://rhn.redhat.com/errata/RHSA-2013-0981.html RedHat Security Advisories: RHSA-2013:0982 http://rhn.redhat.com/errata/RHSA-2013-0982.html SuSE Security Announcement: SUSE-SU-2013:1152 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html SuSE Security Announcement: SUSE-SU-2013:1153 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html SuSE Security Announcement: openSUSE-SU-2013:1140 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html SuSE Security Announcement: openSUSE-SU-2013:1141 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html SuSE Security Announcement: openSUSE-SU-2013:1142 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html SuSE Security Announcement: openSUSE-SU-2013:1143 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html http://www.ubuntu.com/usn/USN-1890-1 http://www.ubuntu.com/usn/USN-1891-1