Количество 3
Количество 3
CVE-2026-48332
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.
GHSA-qmg7-8pr5-gpf8
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.
BDU:2026-10069
Уязвимость программной платформы ColdFusion, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю обойти существующие механизмы безопасности
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48332 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed. | CVSS3: 7.7 | 11% Средний | 16 дней назад |
| GHSA-qmg7-8pr5-gpf8 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed. | CVSS3: 7.7 | 11% Средний | 16 дней назад |
 | BDU:2026-10069 Уязвимость программной платформы ColdFusion, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю обойти существующие механизмы безопасности | CVSS3: 7.7 | 11% Средний | 17 дней назад |
Уязвимостей на страницу