Medium severity4.9NVD Advisory· Published Oct 14, 2022· Updated Jun 17, 2026
CVE-2022-38423
CVE-2022-38423
Description
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction, but does require administrator privileges.
Affected products
22cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/coldfusion/apsb22-44.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.