ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass  

CVE-2021-40698

Summary

Adobe ColdFusion versions 2021 up to update 1 and 2018.10 and earlier are susceptible to a vulnerability related to the use of inherently dangerous functions. This flaw allows an authenticated attacker to bypass security features, potentially gaining access to and manipulating arbitrary data within the system. Organizations using affected versions are urged to review their security measures and apply necessary updates to safeguard their environments.

References