Description
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Focus for iOS | — | 142 |
Advisories 1
- WID-SEC-2025-1866 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 15, 2026