CVE-2013-0631

Adobe ColdFusion versions 9.0 through 9.0.2 have a vulnerability that allows attackers to access sensitive information through unspecified methods. This flaw was actively exploited by malicious actors in January 2013.

An information disclosure vulnerability exists in ColdFusion 9.0-9.0.2 that permits unauthorized access to sensitive data via unspecified attack vectors. The vulnerability was confirmed through active exploitation in the wild, indicating practical exploitability without requiring special privileges or user interaction.