Логотип exploitDog
bind:CVE-2025-6430
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-6430

Количество 11

Количество 11

ubuntu логотип

CVE-2025-6430

29 дней назад

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2025-6430

29 дней назад

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-6430

29 дней назад

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-6430

29 дней назад

When a file download is specified via the `Content-Disposition` header ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-fvqv-c5hj-jcrp

26 дней назад

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2025-07582

29 дней назад

Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

CVSS3: 6.1
EPSS: Низкий
oracle-oval логотип

ELSA-2025-10074

22 дня назад

ELSA-2025-10074: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-10073

22 дня назад

ELSA-2025-10073: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-10072

22 дня назад

ELSA-2025-10072: firefox security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02123-1

27 дней назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02122-1

27 дней назад

Security update for MozillaFirefox

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-6430

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
0%
Низкий
29 дней назад
redhat логотип
CVE-2025-6430

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
0%
Низкий
29 дней назад
nvd логотип
CVE-2025-6430

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
0%
Низкий
29 дней назад
debian логотип
CVE-2025-6430

When a file download is specified via the `Content-Disposition` header ...

CVSS3: 6.1
0%
Низкий
29 дней назад
github логотип
GHSA-fvqv-c5hj-jcrp

When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `&lt;embed&gt;` or `&lt;object&gt;` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.1
0%
Низкий
26 дней назад
fstec логотип
BDU:2025-07582

Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

CVSS3: 6.1
0%
Низкий
29 дней назад
oracle-oval логотип
ELSA-2025-10074

ELSA-2025-10074: firefox security update (IMPORTANT)

22 дня назад
oracle-oval логотип
ELSA-2025-10073

ELSA-2025-10073: firefox security update (IMPORTANT)

22 дня назад
oracle-oval логотип
ELSA-2025-10072

ELSA-2025-10072: firefox security update (IMPORTANT)

22 дня назад
suse-cvrf логотип
SUSE-SU-2025:02123-1

Security update for MozillaFirefox

27 дней назад
suse-cvrf логотип
SUSE-SU-2025:02122-1

Security update for MozillaFirefox

27 дней назад

Уязвимостей на страницу