Improper Input Validation in ColdFusion Enables Security Bypass

Executive Summary

This vulnerability affects ColdFusion versions 2023.18, 2025.6, and earlier. It is an Improper Input Validation issue that allows an attacker to bypass security features.

By exploiting this vulnerability, an attacker could circumvent security measures and gain unauthorized access to the system.

Exploitation requires user interaction.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized access by bypassing security features, which may compromise the integrity of your system.

Since the attacker can bypass security controls, this could result in potential data manipulation or unauthorized actions within the affected ColdFusion environment.

Useful 0 Not Useful 0