TI-2021-03286 CVE-2021-4430 · GHSA-m8v7-q2v8-xpcv
Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure
Priority LOW 34
A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6.
Vulnerabilities
3 records
TI-2020-12541 CVE-2020-15928 · GHSA-cw22-47j6-2cpf
In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to…
Priority LOW 28
In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal.
TI-2020-12542 CVE-2020-15929 · GHSA-cq82-f654-8cvc
In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to…
Priority MEDIUM 50
In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to write an arbitrary CFM file (within the application's context) containing attacker-de…