CVE-2025-55032

published 2025-08-19

CVE-2025-55032: Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	—	—
mozilla	firefox_focus	< 142.0	142.0

CWE-601