CVE-2025-55032
published 2025-08-19CVE-2025-55032: Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS…
PriorityP424medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.15%
4.4th percentile
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox_focus | < 142.0 | 142.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Mozilla
Mozilla Foundation Security Advisory 2025-69: CVE-2025-55032
vendor_mozilla·CVSS 6.1
CVE-2025-55032 [MEDIUM] Mozilla Foundation Security Advisory 2025-69: CVE-2025-55032
Mozilla Foundation Security Advisory 2025-69
CVE: CVE-2025-55032
Product: Focus for iOS
Impact: moderate
Fixed in: Focus for iOS 142
GHSA
GHSA-4cqw-2v9h-hfqw: Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing
ghsa_unreviewed·2025-08-19
CVE-2025-55032 [MEDIUM] CWE-601 GHSA-4cqw-2v9h-hfqw: Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks This vulnerability affects Focus for iOS < 142.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-08-19
Published