Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjw5-6w2m-jr5w

Опубликовано: 10 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.

EPSS

Процентиль: 6%
0.00025
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 5.6
nvd
2 месяца назад

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.

CVSS3: 5.6
fstec
2 месяца назад

Уязвимость программной платформы ColdFusion, связанная с ошибками разграничения доступа, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 6%
0.00025
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-284