CNNVD-202507-170 Information

CNNVD ID

CNNVD-202507-170

CVE-2025-34074

  • CNNVD Published: 2025-07-02

Description (Chinese)

Lucee是Lucee开源的一个用 Java 编写的高性能开源 CFML 服务器。 Lucee存在安全漏洞,该漏洞源于任务功能不安全,可能导致远程代码执行。

Description (English)

Lucee is a high-performance open source CFML server developed by Java. There was a security loophole in Luce, which stemmed from the mission ’ s unsafe functioning and could lead to remote code implementation.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Lucee

Published

2025-07-02

Last Modified

2026-02-24

References

https://github.com/lucee/Lucee https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/ https://vulncheck.com/advisories/lucee-admin-interface-rce

Share on: