Thursday, June 13, 2019

Adobe ColdFusion Fixed

Adobe have released updated versions of ColdFusion web application development platform. These fixes resolve three critical vulnerabilities (CVE-2019-7838, CVE-2019-7839, CVE-2019-7840) that may allow an attacker to execute arbitrary code in the affected system.

Affected versions:
- ColdFusion (2018 release): update 3 and earlier versions
- ColdFusion (2016 release): update 10 and earlier versions
- ColdFusion 11: update 18 and earlier versions

More information can be read from Adobe's security bulletin.

No comments: