CVE-2013-1701

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0,...

10.0 High

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Exploit likelihood

4.59%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2013-1701
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-1701
Updated: 2026-11-02

EUVDEUVD-2013-1728 No score

Record: EUVD-2013-1728
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mqv6-w9c5-2g74 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0,...

Record: GHSA-mqv6-w9c5-2g74
Updated: 2026-11-02

OSVMGASA-2013-0248 No score

Updated firefox and thunderbird packages fix security vulnerabilities

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code (CVE-2013-1701).

Mozilla security researcher moz_bug_r_a4 reported that through an interaction of frames and browser history it was possible to make the browser believe attacker-supplied content came from the location of a previous page in browser history. This allows for cross-site scripting (XSS) attacks by loading scripts from a misrepresented malicious site through relative locations and the potential access of stored credentials of a spoofed site (CVE-2013-1709).

Mozilla security researcher moz_bug_r_a4 reported a mechanism to execute arbitrary code or a cross-site scripting (XSS) attack when Certificate Request Message Format (CRMF) request is generated in certain circumstances (CVE-2013-1710).

Security researcher Cody Crews reported that some Javascript components will perform checks against the wrong uniform resource identifier (URI) before performing security sensitive actions. This will return an incorrect location for the originator of the call. This could be used to bypass same-origin policy, allowing for cross-site scripting (XSS) or the installation of malicious add-ons from third-party pages (CVE-2013-1713).

Mozilla community member Federico Lanusse reported a mechanism where a web worker can violate same-origin policy and bypass cross-origin checks through XMLHttpRequest. This could allow for cross-site scripting (XSS) attacks by web workers (CVE-2013-1714).

Security researcher Georgi Guninski reported an issue with Java applets where in some circumstances the applet could access files on the local system when loaded using the a file:/// URI and violate file origin policy due to interaction with the codebase parameter. This affects applets running on the local file system. Mozilla developer John Schoenick later discovered that fixes for this issue were inadequate and allowed the invocation of Java applets to bypass security checks in additional circumstances. This could lead to untrusted Java applets having read-only access on the local files system if used in conjunction with a method to download a file to a known or guessable path (CVE-2013-1717).

Record: MGASA-2013-0248
Updated: 2026-11-02

OSVMGASA-2013-0329 No score

Updated iceape packages fix many vulnerabilities

Updated iceape packages fix security issues:

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1682)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1683)

Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1684)

Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1685)

Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2013-1686)

The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site. (CVE-2013-1687)

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location. (CVE-2013-1690)

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site. (CVE-2013-1692)

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code. (CVE-2013-1693)

The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag. (CVE-2013-1694)

Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.…

Record: MGASA-2013-0329
Updated: 2026-11-02

Show 6 moreShow less

OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10071-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10218-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10230-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14572-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0446-1 No score

Security update for Mozilla Firefox

This update to Firefox 17.0.9esr (bnc#840485) addresses:

* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
  'this' object
      o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
      o use-after-free in mozilla::layout::ScrollbarActivity
        (CVE-2013-1735)
      o Memory corruption in nsGfxScrollFrameInner::IsLTR()
        (CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
      o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
        list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
      o compartment mismatch in nsXBLBinding::DoInitJSClass
        (CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
  verification
      o MAR signature bypass in Updater could lead to downgrade
        (CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
  memory corruption
      o ABORT: bad scope for new JSObjects: ReparentWrapper /
        document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
  cloning
      o Heap-use-after-free in nsAnimationManager::BuildAnimations
        (CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
  rv:17.0.9)
      o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
        (CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
      o ASAN heap-buffer-overflow (read 1) in
        cryptojs_interpret_key_gen_type (CVE-2013-1705)

Security Issue references:

* CVE-2013-1737
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>

Record: SUSE-SU-2015:0446-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0447-1 No score

Security update for Mozilla Firefox

This update to Firefox 17.0.9esr (bnc#840485) addresses:

* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
  'this' object
      o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
      o use-after-free in mozilla::layout::ScrollbarActivity
        (CVE-2013-1735)
      o Memory corruption in nsGfxScrollFrameInner::IsLTR()
        (CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
      o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
        list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
      o compartment mismatch in nsXBLBinding::DoInitJSClass
        (CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
  verification
      o MAR signature bypass in Updater could lead to downgrade
        (CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
  memory corruption
      o ABORT: bad scope for new JSObjects: ReparentWrapper /
        document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
  cloning
      o Heap-use-after-free in nsAnimationManager::BuildAnimations
        (CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
  rv:17.0.9)
      o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
        (CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
      o ASAN heap-buffer-overflow (read 1) in
        cryptojs_interpret_key_gen_type (CVE-2013-1705)

Security Issue references:

* CVE-2013-1737
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>

Record: SUSE-SU-2015:0447-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`iceweasel` Debian:7 From an advisory covering 6 CVEs	before 17.0.8esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 36 moreShow less 11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-2	17.0.8esr-1~deb7u1
`icedove` Debian:7 From an advisory covering 6 CVEs	before 17.0.8-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.2-1 Show 5 moreShow less 17.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u1	17.0.8-1~deb7u1
`firefox` Mageia:2 From an advisory covering 6 CVEs	before 17.0.8-1.mga2	17.0.8-1.mga2
`firefox-l10n` Mageia:2 From an advisory covering 6 CVEs	before 17.0.8-1.mga2	17.0.8-1.mga2
`thunderbird` Mageia:2 From an advisory covering 6 CVEs	before 17.0.8-1.mga2	17.0.8-1.mga2
`thunderbird-l10n` Mageia:2 From an advisory covering 6 CVEs	before 17.0.8-1.mga2	17.0.8-1.mga2
`firefox` Mageia:3 From an advisory covering 6 CVEs	before 17.0.8-1.mga3	17.0.8-1.mga3
`firefox-l10n` Mageia:3 From an advisory covering 6 CVEs	before 17.0.8-1.mga3	17.0.8-1.mga3
`thunderbird` Mageia:3 From an advisory covering 6 CVEs	before 17.0.8-1.mga3	17.0.8-1.mga3
`thunderbird-l10n` Mageia:3 From an advisory covering 6 CVEs	before 17.0.8-1.mga3	17.0.8-1.mga3

Show 38 moreShow less

Affected packages
Package	Affected	Fixed
`iceape` Mageia:2 From an advisory covering 55 CVEs	before 2.22-1.mga2	2.22-1.mga2
`iceape` Mageia:3 From an advisory covering 55 CVEs	before 2.22-1.mga3	2.22-1.mga3
`firefox` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:17.0.8-1.el5_9	0:17.0.8-1.el5_9
`firefox-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:17.0.8-1.el5_9	0:17.0.8-1.el5_9
`xulrunner` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el5_9	0:17.0.8-3.el5_9
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el5_9	0:17.0.8-3.el5_9
`xulrunner-devel` Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el5_9	0:17.0.8-3.el5_9
`firefox` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`firefox-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`xulrunner` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-devel` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`firefox` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`xulrunner` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`firefox` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`firefox-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`xulrunner` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-devel` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`firefox` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-1.el6_4	0:17.0.8-1.el6_4
`xulrunner` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`xulrunner-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-3.el6_4	0:17.0.8-3.el6_4
`thunderbird` Red Hat:rhel_productivity:5 From an advisory covering 6 CVEs	before 0:17.0.8-5.el5_9	0:17.0.8-5.el5_9
`thunderbird-debuginfo` Red Hat:rhel_productivity:5 From an advisory covering 6 CVEs	before 0:17.0.8-5.el5_9	0:17.0.8-5.el5_9
`thunderbird` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`thunderbird` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`thunderbird` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:17.0.8-5.el6_4	0:17.0.8-5.el6_4
`MozillaFirefox` openSUSE:Tumbleweed From an advisory covering 899 CVEs	before 50.1.0-1.1	50.1.0-1.1
`MozillaThunderbird` openSUSE:Tumbleweed From an advisory covering 560 CVEs	before 45.5.1-1.1	45.5.1-1.1
`firefox-esr` openSUSE:Tumbleweed From an advisory covering 1860 CVEs	before 128.5.1-1.1	128.5.1-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1701 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published August 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.59%, the 91st percentile. No source names a fixed version.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,997 references and the rest of 1 source description. The JSON record has them.