Description
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.
References
- VU#437385 third-party-advisory
Unscored
CVE-2014-2868
EUVD-2014-2892GHSA-mch8-7v52-7hhx
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using …
Published Apr 15, 2014 · Updated Sep 17, 2024 · Assigned by mitre