Adobe ColdFusion Improper Access Control Vulnerability Allowing Arbitrary File System Read

An improper access control vulnerability has been identified in Adobe ColdFusion versions 2025.1, 2023.13, and 2021.19 and earlier. This vulnerability could allow an attacker to read arbitrary files from the file system, potentially leading to unauthorized access or modification of sensitive data. The exploitation of this vulnerability does not require any user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to or modification of sensitive data by allowing attackers to read arbitrary files from the file system.