mirror of
https://github.com/0xMarcio/cve.git
synced 2026-04-21 14:06:08 +02:00
991 B
991 B
CVE-2017-7830
Description
The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs loaded by users. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.
POC
Reference
Github
No PoCs found on GitHub currently.