CVE-2024-20767 Adobe ColdFusion
Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.
- CVSS
- not scored
On CISA’s exploited list
Adobe ColdFusion Improper Access Control Vulnerability
- Added
- 2024-12-16
- Federal patch deadline
- 2025-01-06
- Ransomware use
- not known