CVE-2017-2066

CVE-2017-2066 is tied to BlazeDS in Adobe ColdFusion, where a Java deserialization issue in BlazeDS could lead to remote code execution. ThreatPost reports that updating to BlazeDS 4.7.3 mitigates this risk, as part of a ColdFusion hotfix. The connected document confirms the vulnerability resides...

CVE-2017-2066

...

ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs

Adobe today released an important security hotfix for several versions of its ColdFusion rapid web application development platform. The company said the update addresses an input validation vulnerability CVE-2017-3008 in the software that could be used in reflected cross-site scripting XSS...