CVE-2014-2867: Paperthin Commonspot Content Server

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.

Affected products

• Paperthin Commonspot Content Server: up to and including 7.0.1; version 8.0.0 only; version 8.0.1 only; version 8.0.2 only

Published 2014-04-15. Last modified 2026-06-17.