ColdFusion

On the 16th of June, we'd announced support for Azul OpenJDK for ColdFusion going forward and we'd also posted a blog.   We have a breaking update for you all regarding the migration.   Our planned roll out of Coldfusion installers with Azul Zulu JDK has been put on hold. We will continue with our regular update cycles for now with Oracle JDK.   We expect to provide further updates on the Java migration by December 2021.   If you have questions (we know you do), please use this thread. We shall respond ASAP.

As part of the ongoing Log4j vulnerability remediation, I found, on one of our dev servers, where we have also installed ColdFusion Add-on Services, yet another copy of Log4j (log4j-1.2.17.jar), in x:\ColdFusionAdd-onServices\lib\ext.  Unlike the other copies on this system, the date stamp for this file was not updated by the installation of U13.  I do not see this copy of the jar file discussed in any of the remediation documentation, nor do I see anything listed on the ColdFusion Support Center Downloads page.  Please provide direction on whether or not this copy is a security risk and, if it is, how to address it.

Hello all.  Seems We have run into another issue with our newly deployed ColdFusion 2021 servers.  We experienced a similar error back with CF8, and earlier update levels of CF10.  It seems  the issue was resolved in later updates of CF10, but now with CF2021, this issue seems to be back again. We have three physical bare metal servers, each running four clustered instances of coldfusion.  All of these are behind a fortinet load balancer.  While the CF instances on each box are nammed the same (cfusion1 - cfusion4) each box's CF cluster is on a different port to eliminate multicast confusion between machines.  We have changed channelSendOptions to 6 in the server.xml files in order to reduce the number of "Session Already Invalidated" error messages in the coldfusion-error.log files. While we dont have much problem restarting instances when the server has been removed from the load balancer, we do see difficulty restarting instances even und

Hello all: We have a very strange issue. We have a large CF application that was originally written in CF9, upgraded to CF2016, then onto CF2021. There is a invoicing job that runs as a scheduled task everyday. This invoicing job does many steps (creates, checks, and pays) invoices. There are many components (functions) that are used during this process. We went live with this new server in late November of 2021 and since we have done that, the invoicing job has had issues about 4 or 5 times so far. The errors I am seeing are usually something like:Could not find the ColdFusion component or interface components/distributor.distribcontroller.I say usually, because even the "missing" component changes and they are different each time. I have checked every component for errors, so that should not be it and most days this invoice job runs fine. CF2021 is running on Ubuntu 20.04 LTS, 4 CPU.4GB ram. other than this invoice job, application is fine (users never experience

Good Afternoon, In regards to the log4j 1.2.15 JAR file found in "cfusion/lib" directory of ColdFusion2018. We have multiple instances running in multiple enclaves of in a government network, and this file is popping up as a CAT 1 vulnerability. This is an issue because they are saying the log4j-1.2.15 version is no longer supported by Apache. My SysAdmin team and Security team would like to know if there is a plan to resolve this issue and make sure Abode is aware.

HII have CF 9, try to query from DB with utf-8 chars.  it show Ok on web page.Then we tried to write to txt file so we can download and open the Excel.the txt file shows &#... charsPlease help.  I tried to google but can not find and help.I really appreaciate.I will buy you a Starbuck coffee. <!--- Lets make the file, and put the first row of Column headings in ---><cffile action="WRITE" file="#f_dir##f_name#" output="CamperType, FullName, LDName, MCNName, CamperID, Photo" addnewline="Yes" charset="windows-1252"><cfloop query="camperList"><cffile action="APPEND" file="#f_dir##f_name#" output="#camperTypeName#, #camperFullName#, #Ldname#, #mcnName#, #camperID#, #photoIDFile#" addnewline="Yes" charset="utf-8"><!--- End the loop here ---></cfloop><br><cfoutput><a href="reportDownload.cfm?FileName=#absolutefilepath#">Here is the file</a></cfoutput>

https://hub.docker.com/u/adobecoldfusionAny official word on this?

CF2018 Sys Admin here so I don't know alot about the code for the application but I'm getting an http 500 error on all of my instances at boot up. Only fix I have found so far is to clear template cache and then the web app will load. CF Error page and out log are not very descriptive either.  Exception occured before FW/1 was initializedError while resolving the relationship subsectionTemplate in cfc crms.model.beans.criterionTemplates. Check the column mapping for this property. Recently migrated these apps from CF2016 to 2018 and I'm running them on IIS8.5 This occasionally happened while they were on 2016 but not every time the instances startup.

Over the weekend I ran into an issue with initializing a CFC; when cfcomponent is called a 500 error is thrown.  When reveiwing the exception.log file I see the following:java.lang.StackOverflowError at java.base/java.util.HashMap.putVal(HashMap.java:624) at java.base/java.util.HashMap.put(HashMap.java:607) at coldfusion.runtime.LocalScope._bindInternal(LocalScope.java:538) at coldfusion.runtime.NeoPageContext.setVariableScope(NeoPageContext.java:2047) at coldfusion.runtime.NeoPageContext.SymTab_initializeForPage(NeoPageContext.java:1254) at coldfusion.runtime.NeoPageContext.<init>(NeoPageContext.java:256) at coldfusion.runtime.CfJspPage.initialize(CfJspPage.java:163) at coldfusion.runtime.TemplateProxyFactory.resolveComponentHelper(TemplateProxyFactory.java:555) at coldfusion.runtime.TemplateProxyFactory.resolveName(TemplateProxyFactory.java:286) at coldfusion.runtime.TemplateProxyFactory.resolveComponentHelper(TemplateProxyFactory.java:412) at coldfusion.runtime

I have a few subdomains I'd like to create CF servers for on my localhost machine. Rather than have them populate the main folder under my Coldfusion server (CF2018 for me), I'd like to place them under the folder corresponding to their TLD. For instance, if I have a folder = C:/CF2018/County/, I'd like to create the subdomain folders as:C:/CF2018/County/ALC:/CF2018/County/TNC:/CF2018/County/NYetc... But the CF Enterprise Manager defaults to appending the name I'd like for a subdomain/server name to C:/CF2018. It provides no way to add a subfolder such as C:/CF2018/County/AL. I'm forced to make it C:/CF2018/AL or something similar. I could add "Z" to the front of each server's name to push the folders down in the list, I suppose. Not my first choice. Thanks!

Hi all,I just upgraded our CF2018 to CF2021 on the same machine.  CF2021 works as the webpages are loading.  However, <cfmail> is not sending email out. When I tried to send an email out using <cfmail>, the email in in the "Undeliver" folder.  From coldfusion-out.logJan 27, 2022 17:39:04 PM Error [scheduler-0] - javax.mail.MessagingException: Could not convert socket to TLS;   nested exception is:         java.net.SocketException: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext) From Mail.log"Error","scheduler-0","01/27/22","17:39:04","","javax.mail.MessagingException: Could not convert socket to TLS;   nested exception is:         java.net.SocketException: java.security.NoSuchAlgorithmException: Error constructing implementation

I am attempting to migrate to the ACF 2018 docker images.When I start up the ACF 2018 docker images. The docker-compose logs tell me that CF has started the .NET service.When some code is attempting to load in the assembly dlls for the cfobject. I get "The assembly that contains the class must be provided to the assembly attribute."Digging through the docker image I do not see the jnbridge directory that is installed when installing the .net service for Coldfusion environments.Is there a different location that the jnbridge is placed? Do I need additional configuration for the .Net service that doesn't come with the base image of ACF 2018?

Just getting started using PMT and trying to test out the "alerts". I have one alert set up - System CPU Usage when CPU is 75% on average for the past 300 seconds.  I get alerts quite frequently even though PMT's System CPU graph for that same server consistently show less than 10% CPU usage with no spikes.Any idea why these alerts are getting sent?

Dear Support, I am trying to add SVN plugin to new installed CFbuilder 2018, but the old URL I have is not working any more giving 'bad gateway", do you have any reference URL to use for SVN. Thank you in Advance.

Anyone have advice on using WebRTC with Coldfusion?  Can we use Coldfusion sockets?  Are we better off using Node.js?

In an api that I add to my application (payment platform), I have to convert a Json object to Base64. When I use the ToBase64 function. I have this error message. Can anybody help me. Thanks in advance. Cordially,<cfset card_firstname = "Jeremy"> <cfset dataDirectory = getDirectoryFromPath( getCurrentTemplatePath() ) /> <!--- Create a basic ColdFusion object. ---> <cfset test = { "billing":{ "firstName":"#card_firstname#", "lastName":"Grimm", "addressLine1":"3 rue de l'église", "city":"Ostheim", "postalCode":"68150", "country":"FR" }, "shipping":{ "firstName":"Jérémy", "lastName":"Grimm", "addressLine1":"3 rue de l'église", "city":"Ostheim", "postalCode":"68150", "country":"FR", "email":"jerem68@hotmail.com", "phone":"+33-612345678", "shipIndicator":"billing_address", "deliveryTimeframe":"two_day", "firstUseDate":"2017-01-25", "matchBillingAddress":true }, "client":{ "email":"jerem68@hotmail.com", "phone":"+33-612345678", "birthCity":"Colmar", "birthPostalCode":"

Hi,I'm really struggling with this. I'm trying to populate the check boxes from the database, which I've managed. It then goes through to the landing page, but it takes the literal variable name with it instead of the value.  This is the code on first page: <cfquery name="fromTools" datasource="cfook">    SELECT tools FROM toolsin WHERE custid = #custid#</cfquery>     <cfform action="landing.cfml" method="post"><!--- Check box. ---><cfloop query="fromTools">    <input type="checkbox" name="myDataList" value="#fromTools.tools#" ><cfoutput>#fromTools.tools#</cfoutput> <br /></cfloop> <cfinput type="Submit" name="SubmitForm" value="Submit"></cfform>This names the checkboxes with the values from the tools column from the database. But then it goes to page 2:<cfquery name="toolsin" datasource="cfook">    INSERT INTO toolsout VALUES("1234", <cfquer

hi everyone, I need to know the process to encrypt the file {CF_DIR}/lib/neo-datasource.xml from CFAdmin or some script. Thanks a lot.

I'm brand squeaky new to cold fusion and access, as well as Windows, as I'm a Linux dev. I'm trying to connect Access to cold fusion. I've got as far as installing the accessdataengine.exe, and opened odbcad32.exe. I don't know what to write in the Data Source Name. the helpful instructions I'm following at https://yiengly.wordpress.com/2017/05/02/setting-up-an-ms-access-32-bit-data-source-in-coldfusion/ say use the exact name in the Cold Fusion Administrator. I appear to have missed something there. I've got Commandbox installed, but have no access to the adminitrator page. I've tried going to http://127.0.0.1:8500/CFIDE/administrator/index.cfm with the server running (as it says to do here: https://helpx.adobe.com/coldfusion/configuring-administering/administering-coldfusion.html ), but it says "page isn't working". I have no idea what I'm doing. Then to select the database, what am I looking for? If I even had any idea what name to type in, I can't

Hello:I have the <cfquery... below<cfquery name="theQuery" datasource="#application.dsn#">SELECT position_key, position_name,inactive_dateFROM aTableWHERE aColumn IS NULL</cfquery>The Oracle is backend.My question that does the line "WHERE aColumn IS NULL" is possible for SQL Injection?If so, how should I add <cfqueryparam>I tried couple scenario:This line WHERE aColumn IS <cfqueryparam null="true">  error: missing NULL keywordThis line WHERE aColumn = <cfqueryparam null="true"> : the result is diff from WHERE aColumn IS NULLAny advice please.Thank you very much 

I tried to upgrade my CF2018 to CF2021.  The installation process seemed to go well until I tried to reach my website.  It showed my codes in the UDFs that I defined in the Application.cfm in the same directory.  I scrolled the Elements section to the top. I scroll the webpage to the top, and on the Sources section, "<html><head></head><body>" were probably above what is showed below.    This is the section of my Application.cfm.This is getnumbers.udf So, I think my webpage is showing the content of UDF!  Any idea what went wrong? and how it may be fixed? Thanks! dchan  

We're running Coldfusion 2018 at the latest patch level, and have been notified by our security folks that we're using a vulnerable version of the JRE (1.11.0_01).  I'm new to administering Coldfusion and wanted to know what the best practices are for performing JRE updates.  Should we be expecting updates to be included in the Coldfusion updates (I assume not, given how behind we are)?  If not, should we only be applying versions available here (https://www.adobe.com/support/coldfusion/downloads.html)?  Is this a good reference on how to apply the updates? (https://www.petefreitag.com/item/860.cfm)

Hello, Has anyone experience of setting up ActiveMQ on a CF server to consume and later post messages back to Confluent Cloud? I haven't used event gateways before and the whole Confluent side is also new. I have the gateway running locally and consuming basic messages sent locally, its the linkup with Confluent is the unknown. There are various connectors/sinks available within Confluent for ActiveMQ but i'm not sure of their use and do I need anything like that. I ws thinking it would just be a matter of firing up the gateway giving it some sort of url and topics to listen to and once we get a message we want, my cfc handles the rest.  Thanks

Hello All,During install th CF2018, I got this error, please see the attached image.  I was trying to install CF2018 into a governement laptop and have no admin privilege.  What is this Java has something to do with CF2018, and without it, can CF 2018 rusn properly.Thank you

Forget about the 64 bit version.  Forget about the auto installer (security will fail you everytime). Download  ColdFusion_2021_WWEJ_osx10.zip.  Extract the zip to Applications. Open Systems Preferences.  Follow Adobe's instructions whilst keeping Systems Preferences in the foreground.Adobe's Directions but run every thing in sudo:Mac OS XUnzip ColdFusion_2021_WWEJ_osx10.zip file.Unzip ColdFusion2021.zip.Navigate to ColdFusion/cfusion/bin on the terminal.Enter ./cfinstall.sh and follow the on-screen instructions.In Systems Preferences: Security& Privacy/Privacy/Developer Tools/ check terminal app.  (after install you might want to turn it off).Watch Systems Preferences block the install and change everything that I did.  Boom it's done.