CVE-2023-29539
Public on 2023-04-11
Modified on 2024-02-07
Description
The Mozilla Foundation describes this issue as follows:
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware.
CVSS v3 Base Score
See breakdown
