PT-2025-50285 · Adobe · Coldfusion
CVE-2025-61812
·
Publicado
2025-12-09
·
Atualizado
2025-12-15
CVSS v3.1
8.4
Alta
| Vetor | AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier
Description
An improper input validation issue exists in ColdFusion that could allow a high privileged attacker to achieve arbitrary code execution. Exploitation of this issue does not require user interaction.
Recommendations
Update ColdFusion to a version later than 2021.22.
Update ColdFusion to a version later than 2023.16.
Update ColdFusion to a version later than 2025.4.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Coldfusion