Description
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Adobe ColdFusion 2025
Default version status: unaffected
0 to ≤ 2025.0.11affected2025.0.12unaffected
Adobe ColdFusion 2023
Default version status: unaffected
0 to ≤ 2023.0.22affected2023.0.23unaffected