Adobe ColdFusion Path Traversal Vulnerability Leading to Security Feature Bypass

A path traversal vulnerability has been identified in Adobe ColdFusion versions 2023.18, 2025.6 and earlier. This vulnerability allows attackers to access unauthorized files or directories outside of the intended restrictions, potentially bypassing security features. Exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files or directories, allowing for a bypass of security features.

Remediation

Users are advised to update to ColdFusion 2025 Update 7 or ColdFusion 2023 Update 19. For more information, refer to the Adobe ColdFusion downloads page or the respective ColdFusion 2025 and 2023 Lockdown Guides.