Beveiligingsadvies

CVE-2025-54261

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-09 16:58:42

Laatst bijgewerkt 2025-10-08 15:55:34

Toegewezen door adobe

CVSS-score 10.0

Status PUBLISHED

Beschrijving

ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution by an attacker. The victim must have optional configurations enabled. Scope is changed.

← Alle CVE's bekijken Bekijk op cve.org ↗