CVE-2025-71280 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine,…
Medium CVSS: 6.9

CVE-2025-71280

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine, cached account pages could expose sensitive user information to other local users.
Vendor
Xenforo
Product
Xenforo
CWE
CWE-200
Yayın Tarihi
2026-04-01 01:16:40
Güncelleme
2026-04-01 18:52:12
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-200 Xenforo MEDIUM Xenforo 2026

Referanslar

https://www.vulncheck.com/advisories/xenforo-local-account-page-caching-information-disclosure https://xenforo.com/community/threads/xenforo-2-3-7-released-includes-security-fixes.232121/