Skip to content

Comment on Coldfusion is “Unpopular” – I don’t careparent

Comments

As the article indicated, there are new releases, both in Adobe's proprietary version and the open source version (Lucee). Foundeo is a company built around CFML security tools (scanners and a WAF), and they release lockdown guides that are kept up to date.

https://www.foundeo.com

https://www.adobe.com/content/dam/acom/en/products/coldfusio...

I think it's the CF applications that aren't being maintained that are the biggest risk (and there's plenty of those) - Adobe has indicated which version are EOL:

https://helpx.adobe.com/support/programs/eol-matrix.html

Scanners and WAF are, in general, not useful security tools.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.