Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-08756
HistoryOct 14, 2022 - 12:00 a.m.

Adobe ColdFusion XML External Entity Injection Vulnerability (CNVD-2023-08756)

2022-10-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
adobe coldfusion
xml
external entity injection
vulnerability
arbitrary file system reads

0.002 Low

EPSS

Percentile

54.7%

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has an XML external entity injection vulnerability that can be exploited to cause arbitrary file system reads.

0.002 Low

EPSS

Percentile

54.7%