Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151.