Mozilla Firefox Save As Function in Devtools Vulnerability Allows Unintended Execution of Malicious Files

A vulnerability exists in Mozilla Firefox versions prior to 140, where the 'Save As' option in the Network tab of Devtools could download files without the proper file extension. This issue may have resulted in users accidentally executing a harmful program. The vulnerability arises because the response files were not saved with the '.download' extension, which is typically used to indicate a file is in the process of being downloaded and should not be opened until the download is complete.

Impact

This vulnerability could lead to the unintentional execution of malicious software on the user's device.

Remediation

Users can update to Firefox version 140 or later to address this vulnerability.