Adobe ColdFusion Improper Input Validation Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe ColdFusion versions 2025.1, 2023.13, and 2021.19 and earlier. This issue arises from improper input validation, which could enable a high-privileged attacker to bypass security mechanisms and execute code in the context of the current user. Notably, exploitation of this vulnerability does not require user interaction, and it alters the scope of the attack.

Impact

Successful exploitation allows for arbitrary code execution in the context of the current user.