Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-6430

Content-Disposition header ignored when a file is included in an embed or object tag

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mozilla

Description

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 128.12 to ≤ 128.*unaffected
  • 140 to ≤ *unaffected

Mozilla Thunderbird

  • 128.12 to ≤ 128.*unaffected
  • 140 to ≤ *unaffected

References