Adobe ColdFusion Incorrect Authorization Vulnerability Leading to Arbitrary Code Execution

An incorrect authorization vulnerability has been identified in Adobe ColdFusion versions 2025.1, 2023.13, and 2021.19 and earlier. This vulnerability could allow arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this issue to bypass security measures and execute code, although exploitation requires user interaction.

Impact

Exploitation of this vulnerability could result in arbitrary code execution, allowing an attacker to execute malicious code in the context of the affected user.