CVE-2013-3350

CVE-2013-3350

EPSS 7.6%

Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC) public methods via WebSockets.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://stackoverflow.com/questions/17351214/cf10-websocket-p2p-can-invoke-any-public-functions-in-any-cfc-from-javascript-h http://www.adobe.com/support/security/bulletins/apsb13-19.html http://www.securitytracker.com/id/1028757