|
Description
|
|
Multiple vulnerabilities have been identified in Adobe ColdFusion, which could be exploited by attackers to gain knowledge of sensitive information or gain elevated privileges.
The first issues are caused by multiple input validation errors when processing user-supplied data, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected site.
The second vulnerability is caused by an error when processing requests containing a double-encoded null character, which could lead to information disclosure.
The third issue is caused by an unspecified error which could allow session fixation attacks, leading to privilege escalation.
|
