PT-2026-48272 · Adobe · Coldfusion
CVSS v3.1
9.6
Critical
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ColdFusion versions prior to 2023.20
ColdFusion versions prior to 2025.9
Description
An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows an attacker to bypass security features and access unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction, specifically requiring a victim to open a malicious file.
Recommendations
Update ColdFusion to a version later than 2023.19.
Update ColdFusion to a version later than 2025.8.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Coldfusion