← CVE Intelligence

CVE-2022-42341

Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read PUBLISHED

Description (CNA)

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / productVersions
Adobe / ColdFusionaffected unspecified through CF2021U4; affected unspecified through CF2018u14; affected unspecified through None

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.