Security Advisory

CVE-2014-5468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-07 16:04:28

Last updated 2024-08-06 11:48:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.

← Browse all CVEs View on cve.org ↗