CVE-2019-7838

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@adobe.com

Published

2019-06-12

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Coldfusion (Adobe)

References

• https://helpx.adobe.com/security/products/coldfusion/apsb19-27.html