CyberRota Analysis
AI-GeneratedXenforo version 2.3.8 is susceptible to Server-Side Request Forgery (SSRF), allowing attackers with administrator privileges or those capable of adding/saving RSS feeds to enumerate internal services and potentially expose the server's original IP address. This vulnerability poses a significant risk to the confidentiality and integrity of internal network services. Organizations using this version should prioritize remediation to mitigate the risk of unauthorized access and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can enumerate internal services (ports) or expose the original IP address of the server.