ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction and scope is unchanged.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Sep 2026, 23:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-12-10 00:16
Updated : 2026-09-25 23:10
NVD link : CVE-2025-61809
Mitre link : CVE-2025-61809
CVE.ORG link : CVE-2025-61809
JSON object : View
Products Affected
adobe
- coldfusion
CWE
CWE-20
Improper Input Validation