CVE-2021-40698 (coldfusion)

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass??. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

access attacker bypass coldfusion cve data environment feature function security security feature bypass update version vulnerability