Total vulnerabilities in the database
In multipart/x-mixed-replace responses, Content-Disposition: attachment in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
| Software | From | Fixed in |
|---|---|---|
| mozilla / thunderbird | 129.0 | 132.0 |
| mozilla / thunderbird | - | 128.4.0 |
| mozilla / firefox | - | 132.0 |
| mozilla / firefox | - | 128.4.0 |