Description
Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| coldfusion | adobe / coldfusion | >= 2021.0, <= 2021.0_update12 | affected |
| coldfusion | adobe / coldfusion | >= 2021.0, <= 2021.0_update12 | affected |
| coldfusion | adobe / coldfusion | >= 2023.0, <= 2023.0_update_12 | affected |
| coldfusion | adobe / coldfusion | >= 2023.0, <= 2023.0_update_12 | affected |
| ColdFusion | Adobe / ColdFusion | >= 0, <= 2021.12 | affected |