CVE-2014-2865

CVE-2014-2865 describes an access restriction bypass vulnerability in PaperThin CommonSpot versions prior to 7.0.2 and 8.x prior to 8.0.3. This flaw allows remote attackers to bypass security controls by injecting a null byte ('\0') into a pathname, particularly within a ColdFusion web root directory. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for potential compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) with low attack complexity and no authentication required. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.