CVE-2025-13015CWE-290

CVE-2025-13015

Low · published November 11, 2025

CVSS v3.1

3.4

EPSS

0%

Percentile

13.0

In the wild

Unconfirmed

What it is

Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

The record

Technical detail

CVSS v3.1: 3.4 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00229 · 13.0th percentile
Weakness: CWE-290 · Authentication Bypass by Spoofing
Published: 2025-11-11T21:15Z

Affected products (3)

Product	Versions	Fixed in
mozilla/firefox	< 115.30.0	115.30.0
mozilla/firefox	< 145.0	145.0
mozilla/firefox	≥ 140.0, < 140.5.0	140.5.0

References (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1994164 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-87/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-88/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-89/ · [email protected]

EPSS history

Timeline

11 NOV 15:47Z
Spoofing issue in Firefox
cvelistv5