Security Advisory

CVE-2014-5468

8.8
HIGH

Vulnerability Description

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
Published Date February 7, 2020
Official Source NIST NVD Advisory