Vulnerability · Published May 14, 2021 · Assigned by mitre

CVE-2021-32054

Medium 6.1

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)1.0%top 37.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/FirelyTeam/spark/releases/tag/v1.5.5-r4 x_refsource_CONFIRM
https://github.com/FirelyTeam/spark/compare/v1.5.4-r4...v1.5.5-r4 x_refsource_CONFIRM
https://github.com/FirelyTeam/spark/commit/9c79320059f92d8aa4fbd6cc4fa8f9d5d6ba9941 x_refsource_CONFIRM