Volerion logoVolerion
Volerion logoVolerion

Adobe ColdFusion Improper Authentication Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability allowing improper authentication has been identified in Adobe ColdFusion versions 2023.12, 2021.18, and 2025.0 and earlier. This vulnerability could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this issue to bypass authentication mechanisms and execute code, without requiring user interaction.

Impact

Exploitation of this vulnerability could allow for arbitrary code execution in the context of the current user.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
10.0
exploitability
5.0
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.