The issue is related to a flaw in the CORS mechanism of Mozilla Firefox, Firefox ESR, and the Thunderbird email client, specifically an error in source data confirmation. This could allow a remote attacker to bypass security restrictions, potentially leading to the arbitrary loading of cross-origin pages.