CVE-2018-15961

Adobe ColdFusion Unrestricted File Upload Vulnerability

Coldfusion

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.

25. Sep 2018

Ausgewertete Quellen

• Hersteller
  https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html
• Hinweis
  http://www.securityfocus.com/bid/105314
• Hinweis
  http://www.securitytracker.com/id/1041621
• Hinweis
  https://www.exploit-db.com/exploits/45979/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15961
• CISA
  Adobe ColdFusion Unrestricted File Upload Vulnerability
• NVD
  CVE-2018-15961