What’s Vulnerable › Vulnerabilities

CVE-2013-1727

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-09-18 · updated 2026-06-16
• Weakness: CWE-79

Description

Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file.

Affected products

• Mozilla Firefox: through 23.0.1; 19.0, 19.0.1, 19.0.2, 20.0, 20.0.1, 21.0 (+2)

References

• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-84.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=782581
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-84.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=782581

Get alerted when CVE-2013-1727 or the next vulnerability affects your stack