The issue allows remote attackers to bypass the Same Origin Policy. This can be achieved via specially crafted data: and view-source: URIs. The vulnerability is related to the lack of protection for service data, which can be exploited by a remote attacker to bypass existing access restriction policies.