CVE-2025-13019

Опубликовано: 11 нояб. 2025

Источник: redhat

CVSS3: 6.1

Описание

Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Workers component.

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2025:21281	13.11.2025
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2025:21843	20.11.2025
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2025:21120	12.11.2025
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2025:21844	20.11.2025
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2025:22371	01.12.2025

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-346

https://bugzilla.redhat.com/show_bug.cgi?id=2414084firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2025-13019

CVSS3: 8.1

ubuntu

5 месяцев назад

Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5.

CVE-2025-13019

CVSS3: 8.1

nvd

5 месяцев назад

Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5.

CVE-2025-13019

CVSS3: 8.1

debian

5 месяцев назад

Same-origin policy bypass in the DOM: Workers component. This vulnerab ...

GHSA-mv5g-cf64-38cv

CVSS3: 8.1

github

5 месяцев назад

Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.

BDU:2025-14545

CVSS3: 5.4

fstec

5 месяцев назад

Уязвимость компонента DOM: Workers браузеров Mozilla Firefox и Firefox ESR, позволяющая нарушителю обойти существующие ограничения безопасности

6.1 Medium

CVSS3