Mozilla Focus for iOS Content-Disposition Header Vulnerability Allowing XSS
Vulnerability
A vulnerability in Mozilla Focus for iOS versions prior to 142 allows the application to improperly handle Content-Disposition headers of type Attachment. Instead of treating the content as an attachment, the app displays it inline. This mismanagement could lead to Cross-Site Scripting (XSS) attacks.
Impact
Exploitation of this vulnerability could result in Cross-Site Scripting (XSS) attacks.
Remediation
Users can update to Mozilla Focus for iOS version 142 to address this vulnerability.
Added: Aug 19, 2025, 9:31 PM
Updated: Aug 19, 2025, 9:31 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.