CVE-2014-5370: New Atlanta Bluedragon

High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. (dot dot) in the QUERY_STRING to cfchart.cfchart.

Affected products

• New Atlanta Bluedragon: up to and including 7.1.1

Published 2015-04-21. Last modified 2026-06-17.