CVE-2015-7207

CVE-2015-7207 is a vulnerability in Mozilla Firefox versions prior to 43.0 that allows remote attackers to bypass the Same Origin Policy. This is achieved by exploiting improper restrictions on IFRAME Resource Timing API times, enabling crafted JavaScript to leverage history.back and performance.getEntries calls to obtain sensitive information. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and primarily impacting confidentiality. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion and media coverage.