Mozilla Firefox for iOS Content-Disposition Header Handling Vulnerability Allowing XSS
Vulnerability
A vulnerability exists in Firefox for iOS versions prior to 142, where the browser fails to properly handle Content-Disposition headers of type 'Attachment'. Instead of downloading the content, it displays it inline. This mismanagement could potentially lead to Cross-Site Scripting (XSS) attacks.
Impact
Exploitation of this vulnerability could allow for Cross-Site Scripting (XSS) attacks.
Remediation
Users can upgrade to Firefox for iOS version 142 or later to address this vulnerability.
Added: Aug 19, 2025, 9:33 PM
Updated: Aug 19, 2025, 9:33 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.