Improper Input Validation in Adobe ColdFusion

Executive Summary

This vulnerability affects ColdFusion versions 2023.19, 2025.8, and earlier. It is an Improper Input Validation issue that allows a low-privileged attacker to bypass security features. By exploiting this vulnerability, the attacker can gain unauthorized read and write access to the system without requiring any user interaction.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is significant because it allows an attacker with low privileges to bypass security measures and gain unauthorized read and write access. This could lead to exposure or modification of sensitive data and compromise the integrity of the affected system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a low-privileged attacker to bypass security features and gain unauthorized read and write access without user interaction.

Such unauthorized access could potentially lead to exposure or modification of sensitive data, which may impact compliance with data protection regulations like GDPR and HIPAA that require strict controls on data confidentiality and integrity.

However, specific impacts on compliance are not detailed in the provided information.

Useful 0 Not Useful 0