Bug Local cache results in potential data exposure

There is a bug in this version
E

Externalizable

Guest
We have received a report and independently verified that pages containing sensitive content, such as the account details page and passwords page, can be accessed by using the back button after logging out due to local caching strategies. This could result in the exposure of personal data when using a XenForo-powered website on a public computer.

View attachment CleanShot 2025-07-10 at 20.45.48-converted.mp4
View attachment CleanShot 2025-07-10 at 20.46.26.mp4

The private information displayed in both videos is public, and I'm not concerned about sharing it here. However, some...

Read more

Continue reading...