CVE Catalog
CVE-1999-0477
HighExploitation Probability (EPSS)
Very high risk5.33%
92th percentile - higher than 92% of all known CVEs
Summary
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious files to the server, potentially leading to further attacks or system compromise.
Recommendation
It is recommended to block access to openfile.cfm or implement proper authorization mechanisms to prevent unauthorized file uploads.
Original NVD description (English source)
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.