Control the Variables and You Control the Code: Language-Level Vulnerabilities in Adobe ColdFusion

No ratings

Presented at DistrictCon Year 1 by

Brian Reilly

Adobe ColdFusion is still around in 2026 and can be found in some of the key sectors of the DC Metro area and around the world. Maybe you haven’t thought about ColdFusion in years, maybe it's a sore tech debt subject, or maybe it plays a role in your favorite old pentest story (IYKYK). And if you've never heard of ColdFusion you can just think of it as another dynamic scripting language that runs on the JVM.