CVE Published: 16/05/2013 |
CVE Updated: 06/08/2024 |
CVE Year: 2013 Source: mozilla |
Vendor: n/a |
Product: n/a Status : PUBLISHED
CVE-2013-1671 Description
Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.