When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
This could lead to the disclosure of sensitive information or the manipulation of system data.
This isnt theoretical, either.
According toBleepingComputer, proof-of-concept (PoC)exploit codeis already available.
Adobe urged users to apply the given patches immediately, preferably within 72 hours.
For ColdFusion 2021, thats Update 18, and for ColdFusion 2023, thats Update 12.
And with a PoC already available, mounting an attack could be a walk in the park.
ViaBleepingComputer