Skip to content
OpenAdvisories
Unscored CVE-2020-3768 EUVD-2020-25033GHSA-f83v-w8v5-7w53

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lea…

Published Jun 26, 2020 · Updated Aug 4, 2024 · Assigned by adobe

Vendor: Adobe Product: ColdFusion

Description

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

VendorProductAffectedFixed
Adobe ColdFusion ColdFusion 2016, and ColdFusion 2018 versions —

References