Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-658h-wc48-rw6r

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 91%
0.06923
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.1
nvd
10 месяцев назад

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution. Exploitation of this issue does not require user interaction, but admin panel privileges are required, and scope is changed.

CVSS3: 9.1
fstec
10 месяцев назад

Уязвимость программной платформы ColdFusion, связанная с недостаточной проверкой входных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 91%
0.06923
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20