Hi all, running into an issue with CF2023 patch 13. 'writedump()' is being blocked because the cftags/dump.cfm is compiled java byte code. Accessing the admin panel is the same story. Shouldn't files in the server home be exempt from this rule? Is there something I need to specify to allow only server home files instead of all compiled byte code?

As indicated in the error message, you can allow specific directories where you want to allow bytecode / pre-compiled CFML in

pathfilter.txt

. Note that the name of the config file has changed to

pathfilter.json

as of APSB25-52 / CF2023U14 - https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-update-14.html

@Chase Lane Default allowed paths do contain WEB-INF, administrator. If its failing , could be a path resolution issue. As workaround, these paths can be added to pathfilter.json. Since we did not hear this failing for many people, I assume it is machine specific issue.