Modernize or Die® - CFML News Podcast for December 17th, 2024 - Episode 225

Watch the video version on YouTube at https://youtube.com/live/t2KMIxwc1c4?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Kai Koenig - Ventego Creative

Big Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there including BoxLang.
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2025 in Washington DC https://t.co/cFLDUJZEyM
• April 30, 2025 - May 2, 2025 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
    • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support
We have 60 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

New Vulnerability Reported - Adobe Patched in March!
Today, CISA also added a critical Adobe ColdFusion vulnerability (tracked as CVE-2024-20767), which Adobe patched in March. Since then, several proof-of-concept exploits have been published online.

CVE-2024-20767 is due to an improper access control weakness that allows unauthenticated, remote attackers to read the system and other sensitive files. According to SecureLayer7, successfully exploiting ColdFusion servers with the admin panel exposed online can also allow attackers to bypass security measures and perform arbitrary file system writes.
https://www.scyscan.com/cve-2024-20767/adobe-coldfusion-improper-access-control-vulnerability/#google_vignette

Important notice: Upcoming deprecations and removals in ColdFusion (2025 release)
Added cfencode.sh to the table of removals.
Updated Customizing an HTTP response to HTTP reason phrases.
Added contact email id [e-mail]
https://coldfusion.adobe.com/2024/12/important-notice-upcoming-deprecations-and-removals-in-coldfusion-2025-release/
 
ICYMI - Adobe CF2025 Beta is now open
Get an exclusive sneak peek at what’s next for ColdFusion! Sign up for the ColdFusion 2025 Beta Program and get early access to shape the future with us. Engage with the community in the forums, share your thoughts, and keep up with the newest updates and features.

Check out the curated webinar schedule and join us!

.css-j9qmi7{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;font-weight:700;margin-bottom:1rem;margin-top:2.8rem;width:100%;-webkit-box-pack:start;-ms-flex-pack:start;-webkit-justify-content:start;justify-content:start;padding-left:5rem;}@media only screen and (max-width: 599px){.css-j9qmi7{padding-left:0;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;}}.css-j9qmi7 svg{fill:#27292D;}.css-j9qmi7 .eagfbvw0{-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;color:#27292D;}