CVE-2025-13018
BaseFortify
Publication date: 2025-11-11
Last updated on: 2026-04-13
Assigner: Mozilla Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mozilla | firefox | to 140.5.0 (exc) |
| mozilla | firefox | to 145.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-288 | The product requires authentication, but the product has an alternate path or channel that does not require authentication. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a mitigation bypass in the DOM (Document Object Model) security component affecting Firefox versions below 145 and Firefox ESR versions below 140.5. It means that a security measure intended to protect the DOM can be circumvented, potentially allowing unauthorized actions within the browser's DOM environment.
How can this vulnerability impact me? :
The impact of this vulnerability could include unauthorized manipulation or access to the DOM within affected Firefox browsers, potentially leading to security risks such as data exposure, unauthorized actions, or exploitation by attackers.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Firefox to version 145 or later, or Firefox ESR to version 140.5 or later.