CVE-2025-6430

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-6430
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6430.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-6430
Downstream
Related
Published
2025-06-24T13:15:23Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a &lt;embed&gt; or &lt;object&gt; tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

References

Affected packages