CVE-2020-3761: 
Adobe ColdFusion 2016 vulnerability analysis and mitigation

CVE-2020-3761 is a remote file read vulnerability affecting Adobe ColdFusion versions 2016 and 2018. The vulnerability was discovered by Wang Cheng of Venustech ADLab and was disclosed in March 2020. When successfully exploited, this vulnerability allows attackers to perform arbitrary file reads from the ColdFusion installation directory (NVD, Adobe Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, needs no privileges or user interaction, and can result in high confidentiality impact (NVD).

The successful exploitation of this vulnerability could lead to unauthorized access to files within the ColdFusion installation directory, potentially exposing sensitive information to attackers (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of their ColdFusion installation (Adobe Advisory).

The vulnerability was disclosed as part of a larger Adobe security update that addressed multiple critical vulnerabilities across various Adobe products. The disclosure was made outside of Adobe's regular patch schedule, indicating its significance (Threatpost).