Compliance Impact

The vulnerability allows an attacker to bypass security features and access unauthorized files or directories outside intended restrictions. This could potentially lead to exposure of sensitive or protected data.

Such unauthorized access may impact compliance with standards and regulations like GDPR or HIPAA, which require strict controls on data access and protection of personal or sensitive information.

However, the provided information does not explicitly describe the direct effects on compliance with these standards.

Useful 0 Not Useful 0

Executive Summary

This vulnerability affects ColdFusion versions 2023.18, 2025.6 and earlier. It is an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This means that an attacker can bypass security restrictions and access files or directories that should be off-limits.

The attacker does not need any user interaction to exploit this vulnerability, making it easier to leverage.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to bypass security features and access unauthorized files or directories outside the intended restricted areas.

Such unauthorized access could lead to potential disruption or damage, as indicated by the CVSS score which shows a high impact on availability.

Useful 0 Not Useful 0