CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Firefox.
CVE
CVE-2024-10461
Severity
MEDIUM
CVSS
6.1
EPSS
0.57%
Firefox
Original NVD Description
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
Related CVEs
Other vulnerabilities affecting the same vendor(s)