Description
Adobe ColdFusion是美国奥多比（Adobe）公司的一套快速应用程序开发平台。该平台包括集成开发环境和脚本语言。 Adobe ColdFusion 2023.11及之前的2023.x版本、2021.17及之前的2021.x版本存在路径遍历漏洞，该漏洞源于受到路径遍历漏洞的影响，可能导致任意文件系统读取。
Adobe ColdFusion 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secrss.com/articles/73937
https://nic.cczu.edu.cn/2024/1231/c1305a382848/page.htm
https://developer.cloud.tencent.com/article/2549736
https://stack.chaitin.com/vuldb/detail/6229ca67-2868-423d-a9c6-46c5484d654d
https://www.cnvd.org.cn/patchInfo/show/652671
https://www.venustech.com.cn/new_type/aqtg/20241224/28229.html
https://nvd.nist.gov/vuln/detail/CVE-2024-53961
https://helpx.adobe.com/security/products/coldfusion/apsb25-93.html
https://www.sentinelone.com/vulnerability-database/cve-2024-53961/
https://www.ibm.com/think/x-force/fysa-adobe-cold-fusion-path-traversal-vulnerability
https://www.exploit-db.com/exploits/14641