Adobe ColdFusion Security Feature Bypass Vulnerability Allowing Unauthorized Write Access

A vulnerability allowing improper input validation has been identified in Adobe ColdFusion versions 2023.12, 2021.18, and 2025.0 and earlier. This vulnerability could lead to a security feature bypass, allowing a high-privileged attacker to gain unauthorized write access by circumventing security protections. The exploitation of this issue does not require user interaction, and it alters the scope of access.

Impact

Exploitation of this vulnerability could result in unauthorized write access, allowing attackers to manipulate data or application behavior.