Adobe ColdFusion Information Disclosure Vulnerability
Release Date: 24 Dec 2024
RISK: High Risk
TYPE: Clients - Productivity Products
A vulnerability was identified in Adobe ColdFusion. A remote attacker could exploit this vulnerability to trigger sensitive information disclosure and data manipulation on the targeted system.
Note:
Proof Of Concept Exploit Code Is Publicly Available for CVE-2024-53961.
Impact
- Information Disclosure
- Data Manipulation
System / Technologies affected
- ColdFusion 2021 - Update 17 and earlier versions
- ColdFusion 2023 - Update 11 and earlier versions
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
沒有留言:
發佈留言