CVE-2019-7838: Malicious File Upload
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7838?
CVE-2019-7838 refers to a file extension blacklist bypass vulnerability in ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier.
How severe is CVE-2019-7838?
CVE-2019-7838 has a severity rating of 9.8 out of 10, indicating a critical vulnerability.
Which software versions are affected by CVE-2019-7838?
ColdFusion versions 11.0 to 11.0-update18, 2016 to 2016-update9, and 2018 to 2018-update3 are affected by CVE-2019-7838.
What is the potential impact of CVE-2019-7838?
Successful exploitation of CVE-2019-7838 could lead to arbitrary code execution.
Where can I find more information about CVE-2019-7838?
You can find more information about CVE-2019-7838 at the following URL: https://helpx.adobe.com/security/products/coldfusion/apsb19-27.html