Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ΠšΠΎΠ»ΠΈΡ‡Π΅ΡΡ‚Π²ΠΎ 3

ΠšΠΎΠ»ΠΈΡ‡Π΅ΡΡ‚Π²ΠΎ 3

nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2026-48332

16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS3: 7.7
EPSS: Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
github Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

GHSA-qmg7-8pr5-gpf8

16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS3: 7.7
EPSS: Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
fstec Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

BDU:2026-10069

17 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½ΠΎΠΉ ΠΏΠ»Π°Ρ‚Ρ„ΠΎΡ€ΠΌΡ‹ ColdFusion, связанная с нСдостаточной ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΎΠΉ запросов Π½Π° сторонС сСрвСра, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡŽΡ‰Π°Ρ Π½Π°Ρ€ΡƒΡˆΠΈΡ‚Π΅Π»ΡŽ ΠΎΠ±ΠΎΠΉΡ‚ΠΈ ΡΡƒΡ‰Π΅ΡΡ‚Π²ΡƒΡŽΡ‰ΠΈΠ΅ ΠΌΠ΅Ρ…Π°Π½ΠΈΠ·ΠΌΡ‹ бСзопасности

CVSS3: 7.7
EPSS: Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ

УязвимостСй Π½Π° страницу

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ
CVSS
EPSS
ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ
nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
CVE-2026-48332

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS3: 7.7
11%
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄
github Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
GHSA-qmg7-8pr5-gpf8

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS3: 7.7
11%
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄
fstec Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ
BDU:2026-10069

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½ΠΎΠΉ ΠΏΠ»Π°Ρ‚Ρ„ΠΎΡ€ΠΌΡ‹ ColdFusion, связанная с нСдостаточной ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΎΠΉ запросов Π½Π° сторонС сСрвСра, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡŽΡ‰Π°Ρ Π½Π°Ρ€ΡƒΡˆΠΈΡ‚Π΅Π»ΡŽ ΠΎΠ±ΠΎΠΉΡ‚ΠΈ ΡΡƒΡ‰Π΅ΡΡ‚Π²ΡƒΡŽΡ‰ΠΈΠ΅ ΠΌΠ΅Ρ…Π°Π½ΠΈΠ·ΠΌΡ‹ бСзопасности

CVSS3: 7.7
11%
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
17 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

УязвимостСй Π½Π° страницу

exploitDog - КомплСксноС Ρ€Π΅ΡˆΠ΅Π½ΠΈΠ΅ для обнаруТСния, ΠΎΡ†Π΅Π½ΠΊΠΈ ΠΈ устранСния уязвимостСй.