Information Disclosure Vulnerability in WebKitGTK by Red Hat
CVE-2025-13947
Key Information:
- Vendor
The Webkitgtk Team
- Status
- Vendor
- CVE Published:
- 3 December 2025
What is CVE-2025-13947?
A flaw has been identified in WebKitGTK that enables remote, user-assisted information disclosure. This occurs when the file drag-and-drop mechanism is exploited, as the browser does not confirm that such operations are initiated from outside its environment. As a result, it could potentially allow unauthorized access to any files that the user has permission to read.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:2.50.3-2.el7_9
Red Hat Enterprise Linux 8 0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8.2 Advanced Update Support 0:2.50.3-2.el8_2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved