CVE-2013-1727

Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file.

CVSS v2.0

4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N

EPSS

5.19% chance of exploitation in the next 30 days, 92th percentile

Published

2013-09-18

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38766

References

• CVE Record
• NVD entry

Related

• CVE-2013-1710
• CVE-2013-1733
• CVE-2013-1690
• CVE-2013-1734
• CVE-2013-1670
• CVE-2013-1742