Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-thunderbird | Dec 10, 2025 | May 15, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | Oct 30, 2017 | May 16, 2013 |
| Mfsa2013 43 | — | Upgrade to Mozilla Firefox version 21.0Upgrade to the latest version of Mozilla Firefox | May 18, 2013 | May 16, 2013 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-develUpgrade MozillaFirefox-develUpgrade mozilla-nsprUpgrade MozillaFirefox-branding-openSUSEUpgrade mozilla-nspr-32bit | Feb 17, 2015 | May 16, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | May 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub