Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.Referenceshttps://github.com/maddsec/CVE-2023-34598