Friday, September 27, 2019

Adobe ColdFusion Fixed

Adobe have released updated versions of ColdFusion web application development platform. These fixes resolve two critical (CVE-2019-8073, CVE-2019-8074) and one important (CVE-2019-8072) vulnerabilities of which one may allow an attacker to execute arbitrary code in the affected system.

Affected versions:
- ColdFusion (2018 release): update 4 and earlier versions
- ColdFusion (2016 release): update 11 and earlier versions

More information can be read from Adobe's security bulletin.

No comments: