Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-xzgz-31a7-8bax

Summary

Security researcher Shuichiro Suzuki of the Fourteenforty
Research Institute reported the app_tmp directory is set to be
world readable and writeable by Firefox for Android. This potentially allows for
third party applications to replace or alter Firefox add-ons when downloaded
because they are temporarily stored in the app_tmp directory before
installation.
This vulnerability only affects Firefox for Android.

Aliases

alias	CVE-2013-0798

Fixed_packages

url	pkg:mozilla/Firefox@20.0.0
purl	pkg:mozilla/Firefox@20.0.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@20.0.0

Affected_packages

References

reference_url	http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
reference_id
reference_type
scores
url	http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2013-0798

reference_id

reference_type

scores

value	0.003
scoring_system	epss
scoring_elements	0.53317
published_at	2026-04-21T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53213
published_at	2026-04-01T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53332
published_at	2026-04-16T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53337
published_at	2026-04-18T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53236
published_at	2026-04-02T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53261
published_at	2026-04-04T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53229
published_at	2026-04-07T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53281
published_at	2026-04-08T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53276
published_at	2026-04-09T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53327
published_at	2026-04-11T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53311
published_at	2026-04-12T12:55:00Z

value	0.003
scoring_system	epss
scoring_elements	0.53294
published_at	2026-04-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2013-0798

reference_url	https://bugzilla.mozilla.org/show_bug.cgi?id=844832
reference_id
reference_type
scores
url	https://bugzilla.mozilla.org/show_bug.cgi?id=844832

reference_url	http://www.mozilla.org/security/announce/2013/mfsa2013-33.html
reference_id
reference_type
scores
url	http://www.mozilla.org/security/announce/2013/mfsa2013-33.html

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox::::::::
reference_id	cpe:2.3:a:mozilla:firefox::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox::::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0:::::::*
reference_id	cpe:2.3:a:mozilla:firefox:19.0:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0.1:::::::*
reference_id	cpe:2.3:a:mozilla:firefox:19.0.1:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0.1:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:google:android::::::::
reference_id	cpe:2.3:o:google:android::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:google:android::::::::

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0798
reference_id	CVE-2013-0798
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0798

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2013-0798

reference_id

CVE-2013-0798

reference_type

scores

value	4.3
scoring_system	cvssv2
scoring_elements	AV:N/AC:M/Au:N/C:N/I:P/A:N

url

https://nvd.nist.gov/vuln/detail/CVE-2013-0798

reference_url

https://www.mozilla.org/en-US/security/advisories/mfsa2013-33

reference_id

mfsa2013-33

reference_type

scores

value	none
scoring_system	generic_textual
scoring_elements

url

https://www.mozilla.org/en-US/security/advisories/mfsa2013-33

Weaknesses

cwe_id	264
name	Permissions, Privileges, and Access Controls
description	Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Exploits

Severity_range_score 4.3 - 4.3

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xzgz-31a7-8bax

Vulnerability Instance