PatchGap
Firefox · DOM

CVE-2025-13019

Cross Origin in DOM
Medium firefox Cross Origin 🔧 Commit mapped

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionSame-origin policy bypass in the DOM: Workers component
ComponentDOM
Bug ClassCross Origin
Tracker1988412
Fix commitc10c01fcdb62 (firefox) +1/-0
CISA KEVNot listed
CreditedOskar L
Disclosed2025-11-11

Files Changed

  • dom/workers/sharedworkers/SharedWorkerService.cpp

Patch

view commit
diff --git a/dom/workers/sharedworkers/SharedWorkerService.cpp b/dom/workers/sharedworkers/SharedWorkerService.cpp
index 1fc58067efb..f7f986e82d5 100644
--- a/dom/workers/sharedworkers/SharedWorkerService.cpp
+++ b/dom/workers/sharedworkers/SharedWorkerService.cpp
@@ -11,6 +11,7 @@
 #include "mozilla/SchedulerGroup.h"
 #include "mozilla/StaticMutex.h"
 #include "mozilla/dom/MessagePort.h"
+#include "mozilla/dom/RemoteWorkerManager.h"  // RemoteWorkerManager::GetRemoteType
 #include "mozilla/dom/RemoteWorkerTypes.h"
 #include "mozilla/dom/SharedWorkerManager.h"
 #include "mozilla/ipc/BackgroundParent.h"
Loading diff…
On This Page