Adobe · Coldfusion · CVE-2013-3336
**Name of the Vulnerable Software and Affected Versions**
Adobe ColdFusion versions 9.0 through 9.0.2
Adobe ColdFusion version 10
**Description**
The issue allows remote attackers to read arbitrary files.
**Recommendations**
For Adobe ColdFusion versions 9.0 through 9.0.2, update to a version that is not affected by this issue.
For Adobe ColdFusion version 10, update to a version that is not affected by this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.