---

CVE-2017-7830 - log back

CVE-2017-7830 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Remote
Type	+ Same-origin policy bypass
Description	+ The Resource Timing API in Firefox before 57.0 and Thunderbird before 52.5 incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs loaded by users.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2017-24/#CVE-2017-7830 + https://bugzilla.mozilla.org/show_bug.cgi?id=1408990
Notes