CVE-2022-38422

Adobe ColdFusion is affected by CVE-2022-38422, a path traversal information disclosure vulnerability in Update 14 and earlier and Update 4 and earlier. Root cause is Improper Limitation of a Pathname to a Restricted Directory, enabling unauthenticated remote attackers to disclose sensitive infor...

CVE-2022-38422 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction...