Vulnerability Description
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paperthin | Commonspot Content Server | <= 7.0.1 |
References
- http://www.kb.cert.org/vuls/id/437385US Government Resource
- http://www.kb.cert.org/vuls/id/437385US Government Resource
FAQ
What is CVE-2014-2868?
CVE-2014-2868 is a vulnerability with a CVSS score of 7.5 (HIGH). PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.
How severe is CVE-2014-2868?
CVE-2014-2868 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2868?
Check the references section above for vendor advisories and patch information. Affected products include: Paperthin Commonspot Content Server.