Modernize or Die® - CFML News Podcast for March 30th, 2023 - Episode 189

2023-03-30 Weekly News - Episode 189

Watch the video version on YouTube at https://youtube.com/live/TgmP20awQ1A?feature=share
 
Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Brad Wood - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content every week
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 
• Join us for the 10th Into the Box - In person ONLY!!!

 
Patreon Support ( amiable ) - UPDATED GOALS

We have 41 patreons:

Goal 1 - 26% -  This goal would help us to fully fund the hosting of ForgeBox.io (www.forgebox.io), the ColdFusion software directory.
Goal 2 - 13% - This goal would fund the development of CommandBox CLI, so it can remain FREE and Open Source forever.
Goal 3 - 6% - This goal would help us to fully fund the Modernize or Die podcasts.

https://www.patreon.com/ortussolutions.

News and Announcements

ICYMI: Critical Security Update for ColdFusion APSB23-25

From Adobe

https://community.adobe.com/t5/coldfusion-discussions/released-coldfusion-2021-and-2018-march-2023-security-updates/td-p/13649873

From Foundeo

Adobe has just published a security bulletin APSB23-25, and has released security updates for ColdFusion 2018 and 2021.

We recommend installing these update as soon as possible, because one of the vulnerabilities has been actively exploited by attackers already.

https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

https://helpx.adobe.com/coldfusion/kb/coldfusion-2018-update-16.html

https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-update-6.html

HackMyCF has been updated to warn you if the hotfix is missing.

It is important to note that if you are on ColdFusion 11, or 2016 that it is possible that your servers could be vulnerable to at least one of these issue as well. However, because these versions reached end of life they are no longer receiving security patches from Adobe.
One thing you can do to mitigate one of these issues is to block requests containing a variable named _cfclient. Some of the filte