ColdFusion

Hi,We upgraded to CF23 Ent (from CF18 Ent) and after the upgrade, our CFFTP fingerprint attribute stopped working. Upon connecting to the remote sFTP server, CFFTP now gives error "Fingerprint is either invalid or missing". However, the fingerprint is valid. The code has been working for years before the CF upgrade. The remote FTP server has not been changed and I can use FileZilla to see the fingerprint, and as expected, it matches the fingerprint attribute in our CFFTP. If I remove the CFFTP's fingerprint attribute, we connect just fine. Any ideas what is going on here, or ideas on how to troubleshoot this further?Thanks!Byron

I want to geneate 100+ UUIDs，is there simple way?

I inherited a few ColdFusion applications when I assumed the role of a company's CF guy.Problem is, I did not receive the password for CFAdmin.  There was no turnover so no way to reach out to someone who was already long gone.I used the passwordreset.bat to change the admin password, restarted the CF 2021 service and tried again to get into the administrator.  Got past the login screen but with a problem message instead of the administrator.The full error from the application log says "Error","http-nio-8500-exec-9","08/24/23","21:20:15",cfadmin,"Could not initialize class net.sf.ehcache.config.ConfigurationFactory The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\enter.cfm, line: 684 "Any direction to get this resolved would be really appreciated.

I've tested this against existing installations, as well as a brand new untweaked install. Issue:Simply running C:\ColdFusion2021\config\cfsetup>cfsetup set runtime postparameterslimit=9999 C:\ColdFusion2021\cfusion is slow.  Furthermore, if I do an import of a json full of runtime variables, it take 1 minute per variable.  I am seeing this in the config.log in the cfsetup directory: 25-01-08 13:47:06:753 ERROR main mobile.MobileServlet:258 - Read timed outjava.net.SocketTimeoutException: Read timed outat java.net.SocketInputStream.socketRead0(Native Method) ~[?:?]at java.net.SocketInputStream.socketRead(SocketInputStream.java:115) ~[?:?]at java.net.SocketInputStream.read(SocketInputStream.java:168) ~[?:?]at java.net.SocketInputStream.read(SocketInputStream.java:140) ~[?:?]at java.io.BufferedInputStream.fill(BufferedInputStream.java:252) ~[?:?]at java.io.BufferedInputStream.read1(BufferedInputStream.java:292) ~[?:?]at java.io.BufferedInputStream.read(Buffere

I am running into an issue with the CF Mail package saying it didn't load after we did a patch update from 10 to 13 for CF2021.  Below is the error we are seeing and then after that it says that the mail package is not installed and to install it, even though it shows in package manager that it's installed. ...Cannot find implementation class coldfusion.tagext.mail.MailTag for the mail tag... I have tried uninstalling and reinstalling the mail package, restarting Coldfusion, and even restarting the server.  None of which resolved the issue.  I will say that in Patch 10, all the packages were loaded by default.  When we went to Update 13, I did not install all them.  Do I need to go back and install everything?   

Hi allI have issues setting up the apache connector in CF2023 with Mac Sonoma (14.6). After executing wsconfig and setting up the sites, I get a config error. [Thu Jan 09 10:54:05.757783 2025] [so:error] [pid 4178] AH06665: No code signing authority for module at /private/etc/apache2/mod_jk.so specified in LoadModule directive. httpd: Syntax error on line 560 of /private/etc/apache2/httpd.conf: Syntax error on line 4 of /private/etc/apache2/mod_jk.conf: Code signing absent - not loading module at: /private/etc/apache2/mod_jk.so Has anyone experienced the same? I tried it with the embedded CF Update 5 and the newest Update 12 which neither of them worked. Thanks

Hello everyone,I'm having issue with manually install CF 2021 Update 18 with offline mode (java.exe -jar <InstallerReposityUnzippedPath>\bundles\updateinstallers\hotfix-018-330341.jar). The installation finishes with a couple errors in the log about failed to copy hotfix files (solr.war) and then the build number does not update to build 18. It stucks at build 17. I also try manual step with cfusion\bin\cfpm.bat to update packages and it gives the same errors. Is anyone else having the same issue?V/R,Thao 

Hi, since yesterday I'm getting the following error when trying to install packages on Coldfusion 2021 cfpm_audit.logThe packages repository https://www.adobe.com/go/coldfusion-packages is not accessible. You can only load the packages that are available locally in the /usr/local/lib/CommandBox/server/serverHome/adobe-2021.0.04.330004/WEB-INF/bundles directory. https://www.adobe.com:443: Connection Reset on the imagem attachedI tried to install on my personal computer at home and at company computer.

Hi Sir/Madam,Does any one having this: "To display this webpage correctly, resubmit the data you entered earlier. By doing this, you will repeat any action this page previously performed." when click back or click on a button with code: history.back(); ? Strange, the same identical code works on our another coldfusion server ( both environments are Win2019, and Coldfusion 2016).  I do not see any server error or client error. Much appreciated for your help. James

Greetings one and all - I recently tried to create a new scheduled task, and I made enough of them over the years that it should be an issue.I go through the process, and the get this message: An error occurred scheduling the task.For input string: "u=4" I have no idea where or what this message is referring to.I look under the Additional Settings, and under Priority in the input field it shows:u=4. I know I didn't enter it. When I change it, it resets it back to 'u=4,' and I get the error message again.No matter what value I choose, (blank or a number), I get the error message, and the value is back to u=4. Any and all help is appreciated. Thanks  

Hello CF community:I am running RHEL8 and Oracle 21c, I may be able to downgrade to Oracle 19c, but I would rather not.CF CF 2021 and 2023 support matrices indicate that both support Oracle 19c, any infor on Oracle 21c support ? CF2021 supports RHEL8.x and Oracle19c but I can NOT find a CF2021 download for trial/testing, any help ?CF2023 apparently only supports RHEL 9.1+, is this actually the case, it does NOT support RHEL 8.x ?Thanks in advance!

[Update 13 Dec]: Added cfencode.sh to the table of removals. Updated Customizing an HTTP response to HTTP reason phrases. Added contact email id cf-deprecation@adobe.com   In the upcoming ColdFusion (2025 release), we will deprecate and remove certain features to enhance the overall experience, improve security, stay aligned with the latest technological advancements, and eliminate obsolete libraries.    We announced the deprecations and removals on the ColdFusion pre-release forum a few days ago. If you haven't already signed up, please do so today   As part of this exercise, we have analyzed data from various sources and identified features slated for deprecation and removal. Additionally, we are updating the deprecation lifecycle and terminology by removing the "Retired" status.    Definitions  Deprecated: Adobe does not recommend using a deprecated feature in new application development. While no enhancements or modifications will be

Is there a way to capture the value passed in the referrer? I need to capture that and do some searching.

Hello CF Community, I have an application that i am supporting where i need to apply the latest patch to the CF server. Curently we are running 2021 and the servers are patched till update 9.  My team specifiacally does not have experience with applying the latest patch. So my question is can i install the latest update which is 17 right now directly or do i need to do incremental updates?  When checking from CF admin on the servers it can not find the latest update when i click on check for updates. so we will be doing it manually. What files are needed for manual installation of the update.Since we will be doing a manual update can you guys help with any SOPs that might be helpful or list out steps for doing this with info much as possible. Also please let me know if i need to check anything prior. Thanks in advance.

We have released critical security updates for ColdFusion (2023 release) and ColdFusion (2021 release).   Adobe is aware that CVE-2024-53961 has a known proof-of-concept that could cause an arbitrary file system read.   View the security bulletin, APSB24-107, and the tech notes for more information.   Where do I download the updates from Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates   For more information, view the following tech notes: ColdFusion (2023 release) Update 12 ColdFusion (2021 release) Update 18   Known issues in the updates When Update 12 of ColdFusion (2023 release) or Update 18 of ColdFusion (2021 release) is installed on JEE deployments, an error message might appear in certain cases upon attempting to view the Settings Summary page in ColdFusion Administrator. If you encounter an issue while applying Update 12 on the ColdFusion (2023 release) cloud images, c

Greetings, I have receiived the following vulnreabilty scan report from our security team for our CF2023 Enterprise on Tomcat.  Installed version : 9.0.93Fixed version     : 9.0.96Plugin Description:The version of Tomcat installed on the remote host is prior to 9.0.96. It is, therefore, affected by multiple vulnerabilities as referenced in the fixed_in_apache_tomcat_9.0.96_security-9 advisory. - Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request     and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92     through 9.0.95. Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the     issue. (CVE- 2024-523

Hi folks,Tomcat related question, is there any mitigation instruction for https://thehackernews.com/2024/12/apache-tomcat-vulnerability-cve-2024.html?m=1 or an eta for another CF patch ?Have chucked in a feature request > https://tracker.adobe.com/#/view/CF-4225069 anyone else that sees this it would be handy if you could upvote.

Please guide me on the windows server support - Will Windows Server 2012 R2 work with Cold Fusion 2023 or not?

Has anyone had any experience with signing PDFs in ColdFusion using certificates stored on a CAC? I know you can manually import certs to the server, run some java commands to create a keystore, and eventually slap a digital signature on a PDF. What I'd like to do is read the certificate data from the CAC via the browser and use that to populate a digital signature on a PDF using cfpdf - basically recreating the signing of a PDF in Acrobat but within my applications. I'm not sure if this is possible without a 3rd party tool like DbSign or manually moving around PDFs outside the application for signature. Curious to hear of anyone's experience with something like this. Cheers,

Hi everyone, recently our CF server been having some performance issues so I was tasked to install the PMT for monitoring and troubleshooting. After installing and setup the PMT server on a seperate VM. I was able to connect the 2 servers sucsessfully. However, when I check the metrics inside PMT  dashboard, the stats  are all showing 0. One thing I noticed is the metrics show up for a few seconds whenever I reboot the PMT server  but immediately goes to 0 until next time I restart the service. I have tried completely reinstalling Windows and PMT server and the issue is exactly the same. I have tried to look for some setup guide online but seems to be very limited and I cannot find anything that explains the full setup procedure incase I did something wrong.  

Recently we received an error when calling cfinvoke:"Neither the method querytoarray was found in component D:\Websites\ycWeb\trunk\yc\cfc_files\system\resource\company.cfc nor was there any default method with this name present in any of the implementing interface."Here is the call that threw the error (which was made in the company.cfc):<cfinvoke component="#request.path.cfc.querytoarray#" method="querytoarray" xquery="#qry_select_owners#" columnList="#lcase(qry_select_owners.columnList)#" returnvariable="local.arrayResult" />For some reason the initialization disregarded the value in the component attribute.  I don't see how this could have occurred.  This only happened once and then didn't occur again. 

The blog site over at https://coldfusion.adobe.com/blogs/ is not showing any blog posts

I am building a dev machine and recently installed CF2023 in Developer mode (Windows 11 Pro). Everything was working correctly - I could login to CF, added some sites to IIS, was able to access those sites locally and from a test machine. So, I then proceeded to set the alias for the CF_SCRIPTS folder (and added server mapping and MySQL datasources). I am now unable to login to the CF Admin (trying to login locally on the Win 11 Pro machine).  I can see the CF Admin login page, but the ID is prefilled (admin) and nothing happens after entering the correct password and clicking Login. The Coldfusion-out.log file indicates:Error [main] - Unable to install ajax package: java.lang.Exception: Script folder C:\ColdFusion2023\cfusion\wwwroot\[MY-SCRIPT-FOLDER-NAME] not found. Ajax package has been downloaded at C:/ColdFusion2023/bundles/ajax-2023.0.05.330608.zip. If you have created a mapping of cf_scripts folder, you can copy the contents of the downloaded zip into C

Hi, I've been developing for a long time without it working.  But it did work on my old machine.Now I really really need it to work. CF 2023, up to date.Windows 11 is up to date. Debugging Port is set to 5005I even opened this port in Windows 11 to make sure that wasn't the issue. Also, in CF Logs I'm seeing the error below.  I have no idea how to approach it.Maybe I don't need to worry about it. ColdFusion App has been working. Just not the Debugging, at all.So, when I hit certain snags I really need it.Could this be the problem? Thanks In Advance!! ERROR: --------------------------------------------------------------------------------------------Dec 07, 2024 8:14:17 AM org.elasticsearch.client.sniff.Sniffer runSEVERE: error while sniffing nodesjava.io.IOException: An established connection was aborted by the software in your host machineat org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:937)at org.elasticsearch.clie

The SSO Azure Ad team gave us an .xml and .cer files.I uploaded the .xml for creation of the IDP Configuration. For IDP Xml upload, there is no spot for uploading a cert file Where should I upload the .cer file? should I import it to the ColdFusion Key Store or my Java Home Keystore and reference the path in the "Signing Keystore Path"