CVE-2019-7838

No fix known EPSS 17%

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

Published 2019-06-12 · CVE record · OSV

Products: adobe coldfusion