Vulnerability Details CVE-2013-3350
Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC) public methods via WebSockets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://stackoverflow.com/questions/17351214/cf10-websocket-p2p-can-invoke-any-public-functions-in-any-cfc-from-javascript-h
- http://www.adobe.com/support/security/bulletins/apsb13-19.html
- http://www.securitytracker.com/id/1028757
- http://stackoverflow.com/questions/17351214/cf10-websocket-p2p-can-invoke-any-public-functions-in-any-cfc-from-javascript-h
- http://www.adobe.com/support/security/bulletins/apsb13-19.html
- http://www.securitytracker.com/id/1028757
Products affected by CVE-2013-3350
-
cpe:2.3:a:adobe:coldfusion:10.0