Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-m466-854z-93f2
Vulnerability ID VCID-m466-854z-93f2
Aliases CVE-2013-1727
Summary Security researcher Takeshi Terada reported a mechanism to violate same-origin policy for local files using file:// through the use of symbolic links. This problem only affects web pages loaded from the local filesystem. This could allow for cross-site scripting (XSS) and access to locally stored Firefox files containing passwords and cookies. This problem is specific to Firefox for Android.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
epss 0.0224 https://api.first.org/data/v1/epss?cve=CVE-2013-1727
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2013-84
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2013-1727
CVE-2013-1727 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1727
CVE-2013-1727;OSVDB-97396 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/38766.java
CVE-2013-1727;OSVDB-97396 Exploit https://www.securityfocus.com/bid/62480/info
mfsa2013-84 https://www.mozilla.org/en-US/security/advisories/mfsa2013-84
Data source Exploit-DB
Date added Sept. 17, 2013
Description Mozilla Firefox 9.0.1 - Same Origin Policy Security Bypass
Ransomware campaign use Known
Source publication date Sept. 17, 2013
Exploit type remote
Platform multiple
Source update date Nov. 20, 2015
Source URL https://www.securityfocus.com/bid/62480/info
Exploit Prediction Scoring System (EPSS)
Percentile 0.84483
EPSS Score 0.0224
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:17:38.400309+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-84.md 38.0.0