CVE-2013-1692: CSRF
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1692?
CVE-2013-1692 has a moderate severity as it allows for potential cross-site request forgery (CSRF) attacks.
How do I fix CVE-2013-1692?
To fix CVE-2013-1692, update affected versions of Mozilla Firefox, Firefox ESR, and Thunderbird to the latest version.
Which versions are affected by CVE-2013-1692?
CVE-2013-1692 affects Mozilla Firefox versions before 22.0, Firefox ESR versions before 17.0.7, and Thunderbird versions before 17.0.7.
What types of applications are impacted by CVE-2013-1692?
CVE-2013-1692 impacts Mozilla Firefox, Firefox ESR, Thunderbird, and Thunderbird ESR applications.
What could be the consequences of CVE-2013-1692?
The consequences of CVE-2013-1692 include the potential for attackers to manipulate user actions through cross-site request forgery attacks.