Search for vulnerabilities
Vulnerability details: VCID-u63q-637k-sfc9
Vulnerability ID VCID-u63q-637k-sfc9
Aliases CVE-2013-1709
Summary Mozilla security researcher moz_bug_r_a4 reported that through an interaction of frames and browser history it was possible to make the browser believe attacker-supplied content came from the location of a previous page in browser history. This allows for cross-site scripting (XSS) attacks by loading scripts from a misrepresented malicious site through relative locations and the potential access of stored credentials of a spoofed site.In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
epss 0.00521 https://api.first.org/data/v1/epss?cve=CVE-2013-1709
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2013-68
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1709.json
https://api.first.org/data/v1/epss?cve=CVE-2013-1709
993600 https://bugzilla.redhat.com/show_bug.cgi?id=993600
CVE-2013-1709 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709
mfsa2013-68 https://www.mozilla.org/en-US/security/advisories/mfsa2013-68
RHSA-2013:1140 https://access.redhat.com/errata/RHSA-2013:1140
RHSA-2013:1142 https://access.redhat.com/errata/RHSA-2013:1142
USN-1924-1 https://usn.ubuntu.com/1924-1/
USN-1925-1 https://usn.ubuntu.com/1925-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.65871
EPSS Score 0.00521
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:17.170322+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-68.md 37.0.0