PT-2013-3306
CVE-2013-1671
·
Published
2013-05-16
·
Updated
2024-12-12
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 21.0
Description
The issue is related to the improper implementation of the INPUT element in Mozilla Firefox, allowing remote attackers to obtain the full pathname via a crafted web site.
Recommendations
For versions prior to 21.0, update to version 21.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾