CVE-2022-38418

🗓️ 14 Oct 2022 19:42:55Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 73 Views

Adobe ColdFusion versions prior to Update 14 and Update 4 are vulnerable to an 'Improper Limitation of a Pathname to a Restricted Directory' vulnerability, allowing for arbitrary code execution

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-38418	15 Oct 202200:29	–	circl
CNNVD	Adobe ColdFusion 路径遍历漏洞	12 Oct 202200:00	–	cnnvd
CNVD	Adobe ColdFusion Path Traversal Vulnerability (CNVD-2023-08751)	14 Oct 202200:00	–	cnvd
Tenable Nessus	Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)	13 Oct 202200:00	–	nessus
Check Point Advisories	Adobe ColdFusion Improper Access to a Restricted Directory (APSB22-44: CVE-2022-38418)	13 Oct 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-38418 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability	14 Oct 202219:42	–	cvelist
NCSC	Vulnerabilities fixed in Adobe products	12 Oct 202200:00	–	ncsc
NVD	CVE-2022-38418	14 Oct 202220:15	–	nvd
Prion	Path traversal	14 Oct 202220:15	–	prion
Positive Technologies	PT-2022-6420 · Adobe · Coldfusion	11 Oct 202200:00	–	ptsecurity

NVD

Node

adobe coldfusionMatch2018-

adobe coldfusionMatch2018update1

adobe coldfusionMatch2018update10

adobe coldfusionMatch2018update11

adobe coldfusionMatch2018update12

adobe coldfusionMatch2018update13

adobe coldfusionMatch2018update14

adobe coldfusionMatch2018update2

adobe coldfusionMatch2018update3

adobe coldfusionMatch2018update4

adobe coldfusionMatch2018update5

adobe coldfusionMatch2018update6

adobe coldfusionMatch2018update7

adobe coldfusionMatch2018update8

adobe coldfusionMatch2018update9

adobe coldfusionMatch2021-

adobe coldfusionMatch2021update1

adobe coldfusionMatch2021update2

adobe coldfusionMatch2021update3

adobe coldfusionMatch2021update4

[
  {
    "vendor": "Adobe",
    "product": "ColdFusion",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "CF2021U4",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "CF2018u14",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "None",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]