CVE 9.1 CRITICAL

ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)_CVE-2025-61808

9.1 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed.

AI Analysis

Unrestricted Upload of File with Dangerous Type vulnerability leading to arbitrary code execution

Basic Information

ID CVE-2025-61808
Source adobe
Published Dec 9, 2025 at 23:41

Affected Product

Vendor Adobe
Product ColdFusion
Affected Versions Adobe ColdFusion 0

CWE Classification

AI Assessment

AI Score 9.1 / 10
AI Severity Critical
Vendor Adobe
Product ColdFusion
Version 2025.4, 2023.16, 2021.22 and earlier

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.