CVE-2025-71282 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This allows an attacker to obtain information…
High CVSS: 8.7

CVE-2025-71282

XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This allows an attacker to obtain information about the server's directory structure.
Vendor
Xenforo
Product
Xenforo
CWE
CWE-209
Yayın Tarihi
2026-04-01 01:16:40
Güncelleme
2026-04-01 18:53:29
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-209 Xenforo HIGH Xenforo 2026

Referanslar

https://www.vulncheck.com/advisories/xenforo-path-disclosure-via-open-basedir-exceptions https://xenforo.com/community/threads/xenforo-2-3-7-released-includes-security-fixes.232121/