What’s Vulnerable › Vulnerabilities

CVE-2021-32054

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-14 · updated 2026-06-17
• Weakness: CWE-706

Description

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser.

Affected products

• Fire.Ly Spark: through 1.5.4

References

• https://github.com/FirelyTeam/spark/commit/9c79320059f92d8aa4fbd6cc4fa8f9d5d6ba9941
• https://github.com/FirelyTeam/spark/compare/v1.5.4-r4...v1.5.5-r4
• https://github.com/FirelyTeam/spark/releases/tag/v1.5.5-r4
• https://github.com/FirelyTeam/spark/commit/9c79320059f92d8aa4fbd6cc4fa8f9d5d6ba9941
• https://github.com/FirelyTeam/spark/compare/v1.5.4-r4...v1.5.5-r4
• https://github.com/FirelyTeam/spark/releases/tag/v1.5.5-r4

Get alerted when CVE-2021-32054 or the next vulnerability affects your stack