Alexander Heidenreich

**Name of the Vulnerable Software and Affected Versions** FUDForum version 2.6.15 **Description** The issue allows remote attackers to read private posts. This is achieved by modifying the `mid` parameter. The problem is specifically noted in configurations where the "Tree View" is enabled, a setup also found in other products. **Recommendations** For FUDForum version 2.6.15, consider disabling the "Tree View" feature as a temporary workaround until a patch is available. Restrict access to private posts to minimize the risk of exploitation. Avoid using the modified `mid` parameter in affected configurations until the issue is resolved.