CFBreak 2023-46 Published on November 17, 2023
Week 46, 2023: Here's the latest from the CFML, ColdFusion and Lucee community.
ColdFusion Security Hotfix
This week, make sure you don't miss seeing that Adobe has published a security hotfix for ColdFusion 2021, and 2023: ABSB23-52. This hotfix patches three critical and three important security vulnerabilities.
There are still a few seats left for my ColdFusion Developer Security Training Class.
The class will be held online on December 12-13 from 11am to 2pm (Eastern Standard Time, UTC -5).I hope you enjoy this issue of CFBreak!
Cheers!
-Pete
Adobe Security Bulletins and Advisories |
Charlie Arehart |
Security updates released for ColdFusion 2021 and 2023, Nov 14 2023 Just a heads-up for my readers... |
Adobe ColdFusion Blog |
RELEASED- ColdFusion 2023 and 2021 November 14th, 2023 Security Updates ColdFusion (2023 release) Update 6 and ColdFusion (2021 release) Update 12 (release date, November 14, 2023) address vulnerabilities... |
Ben Nadel |
Working Code Podcast - Episode 153: Our Biggest Failures Ben Nadel and the crew talk about their biggest failures in an effort to remove the social stigma around failure... |
Nolan Erck |
Brian Reilly |
Critical Variable Mass Assignment Vulnerability in Adobe ColdFusion (CVE-2023-44350) Background Adobe ColdFusion is vulnerable to a Mass Assignment vulnerability... |
Ortus Solutions |
CFWheels |
Building search forms with tableless models in CFWheels In this post, I hope to persuade you that you will rarely ever need the Tag-based form helpers (textFieldTag, selectTag, etc... |
Lucee Community |
StackOverflow ColdFusion |
CFDocs Function of the Week |
entityLoadByExample()Loads and returns an array of objects that match the `sampleEntity`. entityLoadByExample(sampleEntity [, unique, matchCriteria]) → returns any |
Upcoming Events |
December 12-13: ColdFusion Security Training Online ColdFusion Developer Security Training class taught by Pete Freitag. | |
May 15-17, 2024: Into The Box Washington DC: Registration is now open for the 2024 Into the Box Conference, which has also moved to Washington DC |
Brought to you by: |
This weekly CFML / ColdFusion newsletter is brought to you by Foundeo Inc. Purveyors of security products and services for CFML developers. Our offerings include:
|