CVE-2025-55030: Content-Disposition headers incorrectly ignored for some MIME types
Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-55030?
CVE-2025-55030 is rated as a high severity vulnerability due to its potential for allowing cross-site scripting (XSS) attacks.
How do I fix CVE-2025-55030?
To fix CVE-2025-55030, users should update to the latest version of Firefox for iOS that addresses this vulnerability.
Which versions of Firefox for iOS are affected by CVE-2025-55030?
CVE-2025-55030 specifically affects Firefox for iOS version 142.
What types of attacks can CVE-2025-55030 enable?
CVE-2025-55030 can potentially enable cross-site scripting (XSS) attacks due to improper handling of the Content-Disposition header.
What is the root cause of CVE-2025-55030?
CVE-2025-55030 is caused by Firefox for iOS incorrectly displaying content inline instead of respecting the Content-Disposition header as 'attachment'.