CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 18, 2022

CVE-2013-1690

High

EPSS 47.1%CISA KEV

Mozilla/Firefox and Thunderbird

Description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

EPSS — Exploit Probability

47.1%

Higher than 97.6% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2013-1690

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
EPSS: 47.1%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Mar 28, 2022

Added to KEV

Mar 28, 2022

Remediation Due

Apr 18, 2022

Affected Product

Mozilla

Firefox and Thunderbird

View all Mozilla CVEs

External Links

NVD (NIST)CVE Details MITRE CVE