CVE Vulnerabilities

CVE-2025-13015

Authentication Bypass by Spoofing

Published: Nov 11, 2025 | Modified: Nov 19, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
3.4 LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Ubuntu
MEDIUM

Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5.

Weakness

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 115.30.0 (excluding)
Firefox Mozilla * 145.0 (excluding)
Firefox Mozilla 140.0 (including) 140.5.0 (excluding)
Red Hat Enterprise Linux 10 RedHat firefox-0:140.5.0-2.el10_1 *
Red Hat Enterprise Linux 10 RedHat thunderbird-0:140.5.0-2.el10_1 *
Red Hat Enterprise Linux 10.0 Extended Update Support RedHat firefox-0:140.5.0-2.el10_0 *
Red Hat Enterprise Linux 10.0 Extended Update Support RedHat thunderbird-0:140.5.0-1.el10_0 *
Red Hat Enterprise Linux 7 Extended Lifecycle Support RedHat firefox-0:140.5.0-1.el7_9 *
Red Hat Enterprise Linux 8 RedHat thunderbird-0:140.5.0-2.el8_10 *
Red Hat Enterprise Linux 8 RedHat firefox-0:140.5.0-1.el8_10 *
Red Hat Enterprise Linux 8.2 Advanced Update Support RedHat firefox-0:140.5.0-1.el8_2 *
Red Hat Enterprise Linux 8.2 Advanced Update Support RedHat thunderbird-0:140.5.0-1.el8_2 *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support RedHat firefox-0:140.5.0-1.el8_4 *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support RedHat thunderbird-0:140.5.0-1.el8_4 *
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On RedHat firefox-0:140.5.0-1.el8_4 *
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On RedHat thunderbird-0:140.5.0-1.el8_4 *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support RedHat firefox-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support RedHat thunderbird-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service RedHat firefox-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service RedHat thunderbird-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions RedHat firefox-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions RedHat thunderbird-0:140.5.0-1.el8_6 *
Red Hat Enterprise Linux 8.8 Telecommunications Update Service RedHat firefox-0:140.5.0-1.el8_8 *
Red Hat Enterprise Linux 8.8 Telecommunications Update Service RedHat thunderbird-0:140.5.0-1.el8_8 *
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions RedHat firefox-0:140.5.0-1.el8_8 *
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions RedHat thunderbird-0:140.5.0-1.el8_8 *
Red Hat Enterprise Linux 9 RedHat firefox-0:140.5.0-1.el9_7 *
Red Hat Enterprise Linux 9 RedHat thunderbird-0:140.5.0-1.el9_7 *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions RedHat firefox-0:140.5.0-1.el9_0 *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions RedHat thunderbird-0:140.5.0-1.el9_0 *
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions RedHat firefox-0:140.5.0-1.el9_2 *
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions RedHat thunderbird-0:140.5.0-1.el9_2 *
Red Hat Enterprise Linux 9.4 Extended Update Support RedHat firefox-0:140.5.0-1.el9_4 *
Red Hat Enterprise Linux 9.4 Extended Update Support RedHat thunderbird-0:140.5.0-1.el9_4 *
Red Hat Enterprise Linux 9.6 Extended Update Support RedHat firefox-0:140.5.0-1.el9_6 *
Red Hat Enterprise Linux 9.6 Extended Update Support RedHat thunderbird-0:140.5.0-1.el9_6 *
Mozjs102 Ubuntu esm-apps/noble *
Mozjs102 Ubuntu jammy *
Mozjs102 Ubuntu noble *
Mozjs115 Ubuntu noble *
Mozjs115 Ubuntu plucky *
Mozjs52 Ubuntu esm-apps/focal *
Mozjs52 Ubuntu esm-infra/bionic *
Mozjs68 Ubuntu esm-infra/focal *
Mozjs78 Ubuntu esm-apps/jammy *
Mozjs78 Ubuntu jammy *
Mozjs91 Ubuntu jammy *
Thunderbird Ubuntu jammy *

References