PT-2025-48801 · Webkitgtk+7 · Webkitgtk+7
Publicado
2025-12-03
·
Atualizado
2026-01-20
·
CVE-2025-13947
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WebKitGTK (affected versions not specified)
Description
A security issue exists in WebKitGTK that could allow remote, user-assisted information disclosure. The issue involves the file drag-and-drop mechanism, where WebKitGTK does not properly verify the origin of drag operations. This could allow an attacker to reveal any file the user is permitted to read. The vulnerability is triggered by abusing the drag-and-drop functionality.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Origin Validation Error
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Centos
Debian
Linuxmint
Red Hat
Rocky Linux
Ubuntu
Webkitgtk