CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.

Link	Resource
https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html	Vendor Advisory

Configuration 1

cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:* cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*

---

Published : 2020-03-25 08:15

Updated : 2021-07-21 11:39

---

NVD link : CVE-2020-3794

Mitre link : CVE-2020-3794

No products.

CWE-829