XenForo versions before 2.3.7 emit exception messages when open_basedir restrictions are triggered. These messages contain absolute filesystem paths, thereby revealing the layout of the server’s directories. An attacker can use this information to map the underlying file system and identify potential targets for further attacks. The weakness falls under the category of information disclosure.

The affected product is XenForo forum software before version 2.3.7. All earlier releases are impacted.

The vulnerability has a high severity rating, with a score of 8.7. No exploitation probability score is available, and the issue is not in the Known Exploited Vulnerabilities catalog. The likely attack path is through the web interface; any request that triggers an open_basedir exception will cause the server to return the detailed path information. Thus, unauthenticated or authenticated web traffic can expose directory paths, representing a significant risk to the confidentiality of the server’s file system.