CVE-2025-30291 — ColdFusion | Information Exposure (CWE-200)
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. A low privileged a…
Published: 2025-04-08 · CVSS: 5.5 · CVSS 3.1
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. A low privileged attacker with local access could leverage this vulnerability to gain access to sensitive information which could be used to further compromise the system or bypass security mechanisms. Exploitation of this issue does not require user interaction.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7