Railo administration panel cross-site scripting

Description

Railo is an open-source alternative to the popular Coldfusion application server, implementing a FOSSy CFML engine and application server. Multiple critical vulnerabilities were reported in this application server. This test has confirmed a cross-site scripting vulnerability in the administration panel.

Remediation

Upgrade to the latest version of Railo.

References

Related Vulnerabilities

Severity

Classification

Tags