Mozilla Firefox < 50.0.1 Authentication Bypass

Versions of Mozilla Firefox prior to 50.0.1 are unpatched for a flaw in the ‘nsScriptSecurityManager::GetChannelResultPrincipal()’ function in ‘caps/nsScriptSecurityManager.cpp’ that is triggered when handling HTTP redirects to ‘data: URLs’. This may allow a context-dependent attacker to bypass the same-origin policy.