CVE-2021-21087 PoC — ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in t

Source

https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Adobe%20ColdFusion%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-21087.md

Associated Vulnerability

Title:ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser (CVE-2021-21087)
Description:Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.

File Snapshot


 # Adobe ColdFusion 远程代码执行漏洞 CVE-2021-21087

## 漏洞描述

Adobe ColdFusion是一个快速应用程序开发平台。Adobe ColdFusion 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →