CVE-2025-13015

LOW

Mozilla Firefox < 115.30.0 - Authentication Bypass by Spoofing

Title source: rule
STIX 2.1

Description

Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

References (6)

Scores

CVSS v3 3.4
EPSS 0.0004
EPSS Percentile 11.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-290
Status published
Products (5)
mozilla/firefox < 115.30.0
mozilla/firefox < 145.0
Mozilla/Firefox 115.30 - 115.*
Mozilla/Firefox 140.5 - 140.*
Mozilla/Firefox 145
Published Nov 11, 2025
Tracked Since Feb 18, 2026