CVE-2022-42340
Adobe ColdFusion Improper Input Validation Arbitrary file system read
Vexday Risk Score
33Attention
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 33.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Oct 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Adobe · ColdFusionWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →