Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks. This vulnerability affects Firefox for iOS versions earlier than 142.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2025-55030 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious link that, when clicked by a user, would cause Firefox for iOS to display potentially harmful content inline instead of downloading it. This could lead to cross-site scripting (XSS) attacks if the content is executed in the context of the user’s session.
Affected Products
- Firefox for iOS < 142: This version fails to handle Content-Disposition headers correctly, leading to potential XSS vulnerabilities.
Mitigation
Users are advised to update to the latest version of Firefox for iOS to mitigate this vulnerability. Mozilla has released a patch that addresses the issue by ensuring proper handling of Content-Disposition headers.