The vulnerability of the Apache BlazeDS library’s ColdFusion interpreter allows attackers to execute arbitrary code.

The vulnerability of the Apache BlazeDS library and its ColdFusion interpreter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code as a result of deserialization of Java objects...