Adobe.ColdFusion.CVE-2025-43566.Path.Traversal

description-logoDescription

This indicates an attack attempt to exploit a Path Traversal vulnerability in Adobe ColdFusion.
The vulnerability is due to improper validation of user-supplied inputs. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation of this vulnerability could result in the disclosure of sensitive information.

affected-products-logoAffected Products

Adobe ColdFusion 2025 Update 1
Adobe ColdFusion 2023 Update 13 and earlier versions
Adobe ColdFusion 2021 Update 19 and earlier versions

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

recomended-action-logoRecommended Actions

Apply the latest update from the vendor.
https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2025-05-22 33.012
Modified
Default_action:pass:drop
2025-05-13 32.007
New