Beveiligingsadvies

CVE-2025-49542

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-08 20:49:41

Laatst bijgewerkt 2025-07-09 16:05:20

Toegewezen door adobe

CVSS-score 5.2

Status PUBLISHED

Beschrijving

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser, scope is changed. The vulnerable component is restricted to internal IP addresses.

← Alle CVE's bekijken Bekijk op cve.org ↗