CVE-2025-61808
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.1EPSS 8.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
09 dic 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Adobe · ColdFusion¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →