CVE-2013-5328

CVE-2013-5328 describes a critical arbitrary file read vulnerability affecting Adobe ColdFusion 10 prior to Update 12. This flaw allows unauthenticated remote attackers to access sensitive files on the server. With a CVSS score of 7.8, it poses a high risk due to its network-based attack vector and low attack complexity, potentially leading to significant information disclosure. While no public exploit code or active exploitation is reported, and community discussion is minimal, organizations using vulnerable ColdFusion versions should prioritize patching to mitigate this risk.