VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 8, 2025· Updated Jun 24, 2025

ColdFusion | Improper Access Control (CWE-284)

CVE-2025-30281

Description

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed.

Affected products

2
  • Adobe Inc./Coldfusionllm-fuzzy2 versions
    <=2025.0 and <=2023.12 and <=2021.18+ 1 more
    • (no CPE)range: <=2025.0 and <=2023.12 and <=2021.18
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.