CVE-2014-2867

2022-10-0316:20:48

mitre

www.cve.org

vulnerability

paperthin commonspot

remote attackers

arbitrary code

upload

coldfusion

7.8 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.3%

JSON

Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.

References

www.kb.cert.org/vuls/id/437385