CVE-2016-2825: Improper Access Control

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2016-04001)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 47.0, which stems from the creation of an invalid data: URI that allows the program to allow the location.host property to be...