SecuritySpace - CVE-2013-1711

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-1711

Description: The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross- site scripting (XSS) attacks by leveraging access to an unprivileged object.

Test IDs: 1.3.6.1.4.1.25623.1.2.1.2013.70

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-1711
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18830

CVE ID:	CVE-2013-1711
Description:	The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross- site scripting (XSS) attacks by leveraging access to an unprivileged object.
Test IDs:	1.3.6.1.4.1.25623.1.2.1.2013.70
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1711 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18830