CVE-2005-2481

medium

Description

ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2482

http://marc.info/?l=bugtraq&m=112309656102615&w=2

Details

Source: Mitre, NVD

Published: 2005-08-05

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N