module
Lucee Administrator imgProcess.cfm Arbitrary File Write
| Disclosed |
|---|
| Jan 15, 2021 |
Disclosed
Jan 15, 2021
Description
This module exploits an arbitrary file write in Lucee Administrator's
imgProcess.cfm file to execute commands as the Tomcat user.
imgProcess.cfm file to execute commands as the Tomcat user.
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.