CVE-2025-13947
published 2025-12-03CVE-2025-13947: A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read…
PriorityP338high7.4CVSS 3.1
AVNACLPRNUIRSCCHINAN
EPSS
0.28%
20.0th percentile
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | webkit2gtk | < webkit2gtk 2.50.3-1~deb12u1 (bookworm) | webkit2gtk 2.50.3-1~deb12u1 (bookworm) |
| debian | wpewebkit | < webkit2gtk 2.50.3-1~deb12u1 (bookworm) | webkit2gtk 2.50.3-1~deb12u1 (bookworm) |
| the_webkitgtk_team | webkitgtk | < 2.50.3 | 2.50.3 |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
osv7.4HIGH
vendor_debian7.4HIGH
vendor_redhat7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
WebKitGTK vulnerabilities
vendor_ubuntu·2026-01-05
CVE-2025-66287 WebKitGTK vulnerabilities
Title: WebKitGTK vulnerabilities
Summary: Several security issues were fixed in WebKitGTK.
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Instructions: This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use WebKitGTK, such as Epiphany, to make all the necessary changes.
Red Hat
webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop
vendor_redhat·2025-12-03·CVSS 7.4
CVE-2025-13947 [HIGH] webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop
webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
Statement: The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it enables remote websit
Debian
CVE-2025-13947: webkit2gtk - A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted i...
vendor_debian·2025·CVSS 7.4
CVE-2025-13947 [HIGH] CVE-2025-13947: webkit2gtk - A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted i...
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
Scope: local
bookworm: resolved (fixed in 2.50.3-1~deb12u1)
bullseye: resolved (fixed in 2.50.3-1~deb11u1)
forky: resolved (fixed in 2.50.3-1)
sid: resolved (fixed in 2.50.3-1)
trixie: resolved (fixed in 2.50.3-1~deb13u1)
OSV
CVE-2025-13947: A flaw was found in WebKitGTK
osv·2025-12-03·CVSS 7.4
CVE-2025-13947 [HIGH] CVE-2025-13947: A flaw was found in WebKitGTK
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
GHSA
GHSA-j77f-3hf7-7rvg: A flaw was found in WebKitGTK
ghsa_unreviewed·2025-12-03
CVE-2025-13947 [HIGH] CWE-346 GHSA-j77f-3hf7-7rvg: A flaw was found in WebKitGTK
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
Suricata
ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M1
suricata·2025-01-17·CVSS 6.1
CVE-2020-13947 [MEDIUM] ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M1
ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M1
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M1"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/admin/message.jsp"; fast_pattern; http.request_body; content:"JMSDestination|3d|"; nocase; pcre:"/^.+(script|onmouse[a-z]+|onkey[a-z]+|onerror|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange|style\x3d)/Ri"; reference:cve,2020-13947; classtype:web-application-attack; sid:2059303; rev:1; metadata:affected_product Apache_ActiveMQ, attack_target Web_Server, tls_state TLSDecrypt, created_at 2025_01_17, cve CVE_2020_13947,
Suricata
ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M2
suricata·2025-01-17·CVSS 6.1
CVE-2020-13947 [MEDIUM] ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M2
ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M2
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Apache ActiveMQ Web Console message jsp Cross-Site Scripting (CVE-2020-13947) M2"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/admin/message.jsp"; fast_pattern; content:"JMSDestination="; nocase; distance:0; pcre:"/^.+(script|onmouse[a-z]+|onkey[a-z]+|onerror|onload|onunload|ondragdrop|onblur|onfocus|onclick|ondblclick|onsubmit|onreset|onselect|onchange|style\x3d)/Ri"; reference:cve,2020-13947; classtype:web-application-attack; sid:2059304; rev:1; metadata:affected_product Apache_ActiveMQ, attack_target Web_Server, tls_state TLSDecrypt, created_at 2025_01_17, cve CVE_2020_13947, deployment
No public exploits indexed.
No writeups or analysis indexed.
https://access.redhat.com/errata/RHSA-2025:22789https://access.redhat.com/errata/RHSA-2025:22790https://access.redhat.com/errata/RHSA-2025:23110https://access.redhat.com/errata/RHSA-2025:23433https://access.redhat.com/errata/RHSA-2025:23434https://access.redhat.com/errata/RHSA-2025:23451https://access.redhat.com/errata/RHSA-2025:23452https://access.redhat.com/errata/RHSA-2025:23583https://access.redhat.com/errata/RHSA-2025:23591https://access.redhat.com/errata/RHSA-2025:23742https://access.redhat.com/errata/RHSA-2025:23743https://access.redhat.com/security/cve/CVE-2025-13947https://bugs.webkit.org/show_bug.cgi?id=271957https://bugzilla.redhat.com/show_bug.cgi?id=2418576
2025-12-03
Published