medium6.1
CVE-2025-55032
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS …
Impact
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox Focus | before 142.0 |