VULNERABILITY INTELLIGENCE

CVE-2025-55030

CVSS score6.1 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-08-19
Last modified2026-10-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks. This vulnerability was fixed in Firefox for iOS 142.

Weakness classification

  • CWE-640: Weak Password Recovery Mechanism for Forgotten Password

Primary references