Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe ColdFusion

  • ColdFusion 2016, and ColdFusion 2018 versionsaffected

References