PT-2025-33826 · Mozilla · Firefox For Ios

Renwa · Published 2025-08-19 · Updated 2025-08-20 · CVE-2025-55030

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142

Description: Firefox for iOS did not correctly handle the Content-Disposition header of type Attachment, resulting in content being displayed inline instead of being downloaded. This behavior could potentially lead to cross-site scripting (XSS) attacks.

Recommendations: Update to Firefox for iOS version 142 or later.

Fix

XSS

Weakness Enumeration

CWE-640

CWE-79

Related Identifiers

BDU:2025-10489

CVE-2025-55030

Affected Products

Firefox For Ios

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-55030 · Security Note
• https://mozilla.org/security/advisories/mfsa2025-68 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-68 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55030 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10489 · Security Note
• https://twitter.com/CVEnew/status/1957914212916683061 · Twitter Post
• https://t.me/CVEtracker/30396 · Telegram Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=1976304 · Note
• https://twitter.com/RenwaX23/status/1957835984256565716 · Twitter Post