Vulnerabilities
Report: CVE-2025-71282 - XenForo Path Disclosure via open_basedir Exceptions - Full Analysis
CVE ID :CVE-2025-71282 Published : April 1, 2026, 1:16 a.m. | 1 hour, 8 minutes ago Description :XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This allows an attacker to obtain information about the server's directory structure. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...