Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-11712

An OBJECT tag type attribute overrode browser behavior on web resources without a content-type

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mozilla

Description

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 140.4 to ≤ 140.*unaffected
  • 144 to ≤ *unaffected

Mozilla Thunderbird

  • 140.4 to ≤ 140.*unaffected
  • 144 to ≤ *unaffected

References