{"schemaVersion":3,"id":"CVE-2008-5513","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.","dates":{"published":"2008-12-17T23:00:00.000Z","modified":"2024-08-07T10:56:46.688Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01784,"percentile":0.77971,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01784},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01784,"percentile":0.77971}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01784,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01784,"percentile":0.77971}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.10","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"8.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.10 | 8.04 | 8.10","eol":{"isEol":true,"eolDate":"2009-04-18T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7.10","label":"7.10 'Gutsy Gibbon'","eolFrom":"2009-04-18T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"7.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 5.0","eol":{"isEol":true,"eolDate":"2010-02-15T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"4","label":"4 (Etch)","eolFrom":"2010-02-15T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"4.0r9"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, < 2.0.0.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0, < 3.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, < 2.0.0.19 | ≥ 3.0, < 3.0.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0, < 1.1.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0, < 1.1.14","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, < 2.0.0.19","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, < 2.0.0.19","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":5,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.securityfocus.com/bid/32882","label":"www.securityfocus.com/bid/32882","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-69.html","label":"www.mozilla.org/security/announce/2008/mfsa2008-69.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021421","label":"www.securitytracker.com/id?1021421","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","label":"secunia.com/advisories/33421","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","label":"www.redhat.com/support/errata/RHSA-2008-1036.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","label":"www.vupen.com/english/advisories/2009/0977","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","label":"www.ubuntu.com/usn/usn-690-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47418","label":"exchange.xforce.ibmcloud.com/vulnerabilities/47418","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","label":"secunia.com/advisories/33231","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:245","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","label":"usn.ubuntu.com/690-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","label":"secunia.com/advisories/33203","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2009/dsa-1707","label":"www.debian.org/security/2009/dsa-1707","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","label":"secunia.com/advisories/33216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","label":"www.redhat.com/support/errata/RHSA-2008-1037.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","label":"secunia.com/advisories/33184","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","label":"www.redhat.com/support/errata/RHSA-2009-0002.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:244","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","label":"secunia.com/advisories/33188","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33523","label":"secunia.com/advisories/33523","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/33189","label":"secunia.com/advisories/33189","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/34501","label":"secunia.com/advisories/34501","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]}],"lineage":{"upstream":[],"downstream":["DSA-1707-1","RHSA-2008:1036","RHSA-2008:1037","RHSA-2009:0002"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-12-17T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T10:56:46.688Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:29:11.574Z","stale":false,"partial":false}}