CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.4. It may be remotely exploitable.
CVE
CVE-2025-13947
Severity
HIGH
CVSS
7.4
EPSS
0.33%
Original NVD Description
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.