CVE-2026-73312

概要

参考情報

• bombobombone.github.io/posts/cve-2026-73312 · Exploit
• BomboBombone/CVE-2026-73312 · Exploit
• vulncheck.com/advisories/xenforo-refresh-token-replay-via-expired-access-token · Third Party Advisory
• xenforo.com/community/threads/security-fixes-released-for-all-xenforo-and-media-gallery-versions-2-2-0-2-3-12.239856 · Release Notes
• xenforo.com/community/threads/xenforo-2-3-13-and-add-ons-released-includes-security-fixes.239857 · Release Notes

xenforo のその他の脆弱性

• CVE-2026-74239高 7.2XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated…
• CVE-2026-73321中 6.5XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause per…
• CVE-2026-73320中 6.1XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve pri…
• CVE-2026-73319中 6.1XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to…
• CVE-2026-73318低 3.8XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to …