Description (CNA)
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Adobe / ColdFusion 2025 | affected 0 through 8; unaffected 9 |
| Adobe / ColdFusion 2023 | affected 0 through 19; unaffected 20 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.