High WID-SEC-2025-2022 1 CVE

Adobe ColdFusion: Schwachstelle ermöglicht Manipulation von Daten

Published Sep 9, 2025 · Updated Sep 9, 2025 · de-DE

Vendor: Adobe Product: ColdFusion Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Adobe ColdFusion ausnutzen, um Daten zu manipulieren.

Product

ColdFusion ist ein Applikationsserver sowie Framework zur Erstellung von Web basierten Applikationen.

Vulnerabilities 1

Critical 10.0

CVE-2025-54261 EPSS 27%

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution by an attacker. The victim must have optional …

Adobe ColdFusion

Sep 9, 2025

Revision history

2025-09-09 #1
Initiale Fassung

References

Adobe Security Bulletin APSB25-93 vom 2025-09-09
https://helpx.adobe.com/security/products/coldfusion/apsb25-93.html