Threats tagged 'ghsa-fvqv-c5hj-jcrp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.1	CVE-2025-6430When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was Medium6.12025-06-26GCVE DatabaseCVE-2025-6430 A vulnerability in Firefox versions prior to 140 and Firefox ESR prior to 128.12 causes the Content-Disposition header to be ignored when a file is included via <embed> or <object> tags. This behavior can potentially allow cross-site scripting (XSS) attacks by bypassing intended file download directives. Report on CVE-2025-6430 Vulnerability CWE-79 #ghsa-fvqv-c5hj-jcrp	GCVE Database	2025-06-26

Page 1 of 1