ColdFusion Eval Injection Vulnerability

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability.

This could allow a low-privileged attacker to execute arbitrary code without user interaction.