漏洞描述
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2018-15961↗github.comhttps://github.com/xbufu/CVE-2018-15961↗helpx.adobe.comhttps://helpx.adobe.com/security/products/coldfusion/apsb18-33.html↗web.archive.orghttp://web.archive.org/web/20220309060906/http://www.securitytracker.com/id/1041621↗www.securitytracker.comhttp://www.securitytracker.com/id/1041621↗