CVE-2017-7830

CVE-2017-7830 describes a same-origin policy bypass in the Resource Timing API, allowing cross-origin iframes to reveal navigation details, potentially leading to URL data theft. This vulnerability affects Firefox versions prior to 57, Firefox ESR prior to 52.5, and Thunderbird prior to 52.5. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low attack complexity, requiring user interaction to achieve high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.