PT-2025-50282 · Adobe · Coldfusion
CVE-2025-61809
·
Publicado
2025-12-09
·
Atualizado
2025-12-20
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier
Description
An improper input validation issue exists in ColdFusion that could allow an attacker to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.
Recommendations
Update ColdFusion to a version later than 2021.22.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Coldfusion