CVE-2022-38422CWE-22

Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability

High · published October 14, 2022

CVSS v3.1
7.5
EPSS
45%
Percentile
98.8
In the wild
Unconfirmed
What it is

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.44923 · 98.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-10-14T19:42Z
EPSS history
Timeline
  • 14 OCT 19:42Z
    Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability
    cvelistv5