[Looking for Charlie's main web site?]

Recent critical Lucee security vulns: make sure you're protected, finding out more about them

There has been important news released (this week and last week) about a critical Lucee security vuln (an RCS or remote code execution vuln). You'll want to make sure your Lucee instances are protected either by updates or configuration (or both). There are actually 3 matters to beware.

[....Continue Reading....]

Comments
If you may have gotten my initial notification of this post, I want to note that I have added a new section above, "Mind your P's and Q's...or, why Lucee's cf_client_* cookie vuln is NOT the same issue as CF's _cfclient querystring vuln".
Copyright ©2025 Charlie Arehart
Carehart Logo
BlogCFC was created by Raymond Camden. This blog is running version 5.005.
(Want to validate the HTML in this page?)

Managed Hosting Services provided by
Managed Dedicated Hosting