PT-2025-15662 · Adobe · Coldfusion

CVE-2025-30293 · Publicado 2025-04-08 · Atualizado 2025-04-09

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18

Description: The issue is related to an Improper Input Validation that could result in a security feature bypass. An attacker could leverage this to bypass security measures and gain unauthorized access. Exploitation requires user interaction, where a victim must open a malicious file.

Recommendations: For ColdFusion versions 2025.0 and earlier, update to a version that includes the security fix. For ColdFusion version 2023.12, apply the necessary security patch to resolve the issue. For ColdFusion version 2021.18, consider applying additional security measures to mitigate the risk of exploitation until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2025-04790

CVE-2025-30293

Produtos afetados

Coldfusion

Referências · 8

• https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html · Aviso do Fabricante
• https://t.me/cvedetector/22519 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-30293 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-30293 · Nota de Segurança
• https://t.me/cvetracker/21184 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1909906909693346168 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1909725030553895328 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-04790 · Nota de Segurança