| Package | Affected versions | Patched versions |
|---|---|---|
| coldfusion fusebox | = 4.1.0 |
ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free