Executive Summary

This vulnerability affects ColdFusion versions 2023.18, 2025.6, and earlier. It is an Improper Input Validation issue that could allow an attacker to execute arbitrary code with the privileges of the current user.

Exploitation requires the attacker to have elevated privileges and also requires user interaction, meaning the victim must open a malicious file for the attack to succeed.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can lead to arbitrary code execution in the context of the current user, potentially allowing an attacker to take control of the affected system or application.

Since the attacker needs elevated privileges and user interaction, the risk depends on the environment and user behavior, but successful exploitation can result in full compromise of the affected ColdFusion instance.

Useful 0 Not Useful 0