CVE-2019-7838

2019-06-1215:13:45

adobe

www.cve.org

9.7 High

AI Score

Confidence

High

0.536 Medium

EPSS

Percentile

97.6%

JSON

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CNA Affected

[
  {
    "product": "ColdFusion",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier versions"
      }
    ]
  }
]