Good morning! Please note that this morning we have released two Security Updates for Adobe ColdFusion. Blog post: https://community.adobe.com/t5/coldfusion-discussions/now-live-adobe-coldfusion-2023-and-2021-september-2024-security-updates/td-p/14852233 Update 10 for CF2023: https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-update-10.html Update 16 for CF2021: https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-update-16.html This update covers several issues which are both security related, as well as a bug fix for something introduced in the last patch. As always, please read all notes carefully and regression test on your development systems prior to pushing to production. While we do test on our side, sometimes issues slip through. Please report any bugs or issues you discover at https://tracker.adobe.com. Thanks all, and have a fusealicious day!

Just an FYI for anyone who is doing an offline upgrade on 2021. The bug where it deletes the cfinstallationdir\cfusion\jetty\lib\ext directory still exists. If your jetty server wont start copy the ext folder back from the update backup directory into cfinstallationdir\cfusion\jetty\lib, restart ColdFusion Add-On Services the jetty server will start again. I don't know if this is only when doing an offline upgrade, but it did this on 14 and update 16.

Weekend? what weekend? doh! Can Adobe provide some further information on the attack vector for this ? is it limited to WDDX ?

Gareth, we do not provide public information over and above what is listed in the security notes.

@Mark Takata (Adobe) FYI - the CF2023 page ( https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-update-10.html ) bullet 1 has the hotfix installer link actually pointing to the .zip and on bullet 2 where the .zip file should be linked isn't linked to the zip.

@saghosh please fix this ☝️

Any word on how the 2021 version of this is going for folks besides the above?

Please check now.

@saghosh - sorry, not yet. Even checked with a hard refresh in an incognito window. Still the same.

Thank you Jim. Please check in a while.