The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | May 15, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird. | Oct 30, 2017 | May 16, 2013 |
| Mfsa2013 43 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 21.0 | May 18, 2013 | May 16, 2013 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-develUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-develUpgrade MozillaFirefox-branding-openSUSE | Feb 17, 2015 | May 16, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | May 16, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub