Search: CVE-2024-10461

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.6%	CVE-2024-10461Mozilla Firefox · Cross-site Scripting Medium6.1EPSS 0.6%2024-10-29CVE Database V5CVE-2024-10461 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. EPSS 0.6%Vulnerability CWE-79	CVE Database V5	2024-10-29

Page 1 of 1