PT-2025-33827

CVE-2025-55032

Published

2025-08-19

Updated

2026-10-06

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 142

Description: Focus for iOS did not correctly handle Content-Disposition headers of type Attachment, leading to inline display of content. This behavior could potentially allow for cross-site scripting (XSS) attacks.

Recommendations: Update to version 142 or later.

Exploitability

Fix

Impacts

Researchers

Renwa

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers

CVE-2025-55032

Found an issue in the description? Have something to add? Feel free to write us 👾

dbugs@ptsecurity.com