Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2023-26361

CVSS 3.1
4.9 medium
EPSS
59%p99
Published
·
Modified
Analyze CVE-2023-26361 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in Arbitrary file system read. Exploitation of this issue does not require user interaction, but does require administrator privileges.

Vendors
adobe
Products
coldfusion
Weakness
CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (58.7%)

In the news

2 stories