Questions

Hi,Trying to connect to SFTP site, was getting connection timed out at first.  I looked around for others with the issue found some leads.  Finally with try/catch when dumping cfftp after the end of try cfftp is undefinded.  I have stop on error turned on and secure.  I have tried with Developer Editions of 2023 & and a recent install of Developer 2025.  I did add the extensions to the timeout at both the page and tag level. This is the detail message from 2023 for the catch - Verify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: java.net.ConnectException: Connection timed out: connect. I would like to be able to do this within CF without resorting to WinScp. I have connected to other standard FTP sites successfully. Any help would be appreciated.Mike  

Hello there. I have a website with over 5 thousand pages there but none of them have cannonical links included. My question here is, is it possible to add something like: <link rel="canonical" href="##page_url##" />Add this in the head section of html page. Now, here is the deal, will  this affect my SEO? Will this change apply only when the page loads? Note: When I say page_url above, it's an actual URL page is connected with. If index.cfm page is on https://test.com/potato , then href of the cannonical should be exactly that.  

I'm looking for advices about the rewriting URLs fonction of cfWheels. I'm running an app on Adobe ColdFusion 2025, cfWheels 2.5.1 and CommandBoxI'm looking for rewriting URLs of the website (suppress the"/index.cfm/" prefix) and it works! great! BUT I don't have access to my CFIDE Admin Page, my Database and the cfWheels Routes Page.I have to share with you my .htaccess code: Options +FollowSymLinksRewriteEngine On RewriteCond %{REQUEST_FILENAME} -f [OR]RewriteCond %{REQUEST_FILENAME} -dRewriteRule ^ - [L] RewriteCond %{REQUEST_URI} ^/(CFIDE|cfide|CF_scripts|cf_scripts|wheels/routes) [NC]RewriteRule ^ - [L] RewriteCond %{REQUEST_URI} ^/index.cfm/(.*)$ [NC]RewriteRule ^index.cfm/(.*)$ /$1 [R=301,L]RewriteRule ^(.*)$ /index.cfm/$1 [QSA,L]  There is my settings.cfm: <cfscript>set(coreTestDataSourceName="manytomany");set(dataSourceName="manytomany");set(URLRewriting="On");</cfscript>  There is my server.json:{"app":{"cfengine":"adobe@2025" },"name

Hello,I am using cf 23 and facing the issue when trying to communicate with remote api on spring. This is my cf codebase:var url = "http://localhost:8806/sftp/private/remove/import/test.xml";var httpService = new http(url=url, method="DELETE", timeout=5);httpService.addParam(type="header", name="Accept",  value="application/json");httpService.addParam(type="header", name="cfId", value="123");httpService.addParam(type="header", name="cfToken", value="555-555");var httpServiceResponse = httpService.send();I am trying to delete import/test.xml file on sftp server and if I invoke the call from postman or anywhere else it will work but when I invoke this from CF in request headers it's always fixed accept=application/xml, text/xml;here are headers from spring service - REQUEST headers: [cfid=123; accept=application/xml, text/xml; charset=UTF-8; cftoken=555-555; user-agent=ColdFusion; content-length=0; host=localhost:8806; connection=Keep-Alive; accept-encoding=gzip,

Has the usage of writedump changed in 2025?  I have both 2023 and 2025 running side by side on the same dev server using the same cfscripts.  However when i do writedump(var=info,abort=true) to debug soemthing in 2023 i get a proper dump in the response.  In 2025 all i get is [coldfusion.runtime.AbortException : null] Maybe im missing something but the developer profile is enabled and all debuging is set up the same on both instances.  I can also confirm the same behaviour under both Windows and Linux installs of 2025.

Hello,We are upgrading several machines from CF2021 to CF2023 and are seeing a consistent issue with each upgrade as we go in and try to turn on our ActiveMQ Gateway Instances.  The instances won't start and they are throwing what appear to be java JMS errors in the exception logs.  For instance:"Error","Thread-30","05/14/25","09:26:32","","Failed to start gateway: null""Error","Thread-30","05/14/25","09:26:32","","Error starting gateway <Name of Gateway Instance>: null"java.lang.NullPointerExceptionat java.base/java.util.concurrent.ConcurrentHashMap.putVal(ConcurrentHashMap.java:1011)at java.base/java.util.concurrent.ConcurrentHashMap.put(ConcurrentHashMap.java:1006)at java.base/java.util.Properties.put(Properties.java:1301)at java.base/java.util.Properties.setProperty(Properties.java:229)at examples.ActiveMQ.JMSConsumer.start(JMSConsumer.java:58)at examples.ActiveMQ.JMSGateway.startGateway(JMSGateway.java:47)at coldfusion.eventgateway.GenericGateway.start(GenericGatew

I currently have a jQuery ajax call to a third-party API, which checks a vehicle's licence plate against a national database: $.ajax({ type: "get", url: "https://test.carjam.co.nz/a/vehicle:abcd", data: {key:key,plate:plate}, dataType: "json", success: function(res){ // display message validating license plate and save response data into database } // other code }); However, the third party now requires the call to be from the "back end", as any attempts to use browser code such as JS or juery will result in a "cross-origin" related error. What would be the most effective way to bring this into the back-end? Via a cfc?They also give the option of using node.js, which I know nothing about.

While its vulnerabilities are still mostly relevant towards newer versions of ColdFusion, DISA has now sunset the Adobe ColdFusion 11 STIG as it has not seen an update since 26 Jul 2021. Is there any hope at all for Adobe to work through the vendor STIG process for the newest iterations of the software? Reference: https://public.cyber.mil/stigs/downloads/Reference: https://public.cyber.mil/stigs/vendor-process/

Hi everyone, I’m encountering a recurring issue with ColdFusion 2023 (Update 13) specifically on our PROD DMZ server. We have six ColdFusion servers across different environments — DEV, ACPT, and PROD — each with internal and DMZ configurations. Interestingly, this issue is only occurring on the PROD DMZ server; all other environments, including PROD internal, are functioning normally. The issue is reflected in the Windows Event Viewer, where I’m seeing repeated entries like this: The description of the error is: The description for Event ID 0 from source ColdFusion 2023 ODBC Server cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. ColdFusion 2023 ODBC Server@LOCALHOST, ErrorCode=2310, ErrorMessage=TCP/IP, connection reset by peer This seems to indicate that the ODBC Server is attempting to communicate over TCP/IP but the connection is being reset,

I am using ColdFusion 2023 - Enterprise  Every couple of weeks the ColdFusion Launcher Application will go up and max out the CPU on the server.  Site will then begin to timeout.  Restarting the ColdFusion server services is required to resolve the issue. The configuration for the server is: CF Server: ColdFusion 2023 Enterprises RAM: 16 GBServer: Windows Server 2022 Standard

My company has just notified me of security vulnerabiltiy CVE-2025-31651 which was recently reported.  The vulnerability appears to affect Tomcat versions 9.0.0.M1 through 9.0.102 and the only mitigation seems to be updating to version 9.0.104 or later.Does anyone know if Adobe has plans for a CF2023 to update Tomcat in order to mitigate this vulnerability? Thank you!

I have an AWS EC2 instance built from a Marketplace AMI Coldfusion (2023) Update 11 on hardened AWS Linux with ColdFusion Enterprise Lincense (built around Nov 21 2024)I applied the U12 hotfix (on Apr 8, 2025) and users are reporting an error (see attached) stating that we have a developer license on the server.I applied the U13 hotfix (on Apr 17, 2025)  and the error is still occurring. If anyone has seen this issue or knows of a fix, please help!

We are pleased to inform you that we've released security updates for ColdFusion 2025, 2023, and 2021 releases. For more information, see the respective tech notes: ColdFusion (2025 release) Update 1 ColdFusion (2023 release) Update 13 ColdFusion (2021 release) Update 19   These updates resolve several critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution, and security feature bypass. View the security bulletin, APSB25-15, for more information.   Download the updates ColdFusion 2025 updates ColdFusion 2023 updates ColdFusion 2021 updates   What's new in the updates New JVM flags Refreshed add-on installers IP filtering for cfhtmltopdf Central Configuration Server changes cfencode removal for the 2023 and 2021 updates   Others Bug fixes Known issues   Docker and cffiddle Will be updated shortly. We'll update the post.   Please download and apply the updates and provide your fe

I'm getting an error while trying to upload files. This works fine on our Production server, but the development server is where I'm getting the error. Both servers are running Coldfusion 2023 Update 13 on Windows Server 2022. Attached is an example of the error I'm getting. I'm unsure what to check for here.

Just patched to CF2021 patch 19 and now htmltopdf does not work. In the logs I am seeing Caused by: java.lang.ClassNotFoundException: coldfusion.document.DocumentScope not found by htmltopdf [37] I've tried downgrading back to patch 18.Uninstalling and reinstalling htmltopdf package.Uninstalling and reinstalling all the packages.Upgrading back to patch 19.and numerous reboots. The patch notes includeSometimes, you are unable to create a PDF due to PDFg service authentication failure. As a workaround, update the service manager and retry creating the PDF.What does this mean? What service manager and how do I update it?

I just heard of a guy who ran his website from a computer at home and thus avoided having to deal with the issues of shared hosting. Apparently it worked great for him. Has anyone done this before and what would be involved for a coldfusion website? 

After applying CF2021 Update 19, the add-ons would no longer start, so I reinstalled them to resolve the issue. Unfortunately, SOLR reverted back to 7.2.1. I attempted to upgrade to 8.11.3 manually by following "Upgrade SOLR in ColdFusion" steps (https://helpx.adobe.com/coldfusion/kb/upgrade-solr-security-coldfusion.html), but it has not been successful. Can someone provide guidance or possible work-around?Side note: There was no "managed-schema.xml" within the Solr 8.11.3.zip provided on the from the upgrade page.

Post a brandnew CF2025 in Ubuntu linux 22.04.1 installation unable to start the server, I have selected the installation as Developer mode and Developer Profile. Setup an apache2 connector. I am unclear if I should provide the sudo password when promted or the CFIDE admin password as in older versions CF2021 for instance which always required elevation. myuser@myhost:/opt/coldfusion/cfusion/bin$ sudo ./cfstart.shStarting ColdFusion 2025 server ...Your account has expired; please contact your system administrator.su: Authentication failureThere has been an error starting ColdFusion 2025 server, please check the logs.I can't find the logs in /cfusion/logs folder either. Any ideas? 

Hal Helms, one of ColdFusion's great gurus since the very beginning of the language, passed away two days ago. This sad news was shared by fellow ColdFusion guru, John Quarto-vonTivadar, on https://cfml.slack.com/    I remember Hal Helms. I became familiar with the name within weeks of starting to learn ColdFusion more than twenty years ago.    As a good parent conveys something enduring that sustains the child for life, so does  a good teacher convey something enduring that sustains the learner for a lifetime. Hal Helms was one such teacher. My gratitude to him is immense.Condolences to John Quarto-vonTivadar and to Hal Helms' family.

Impacts: ColdFusion 2025 Update 1 In Package Manager: Settings: Notification, there are two email fields:If updates are available, send email notification toIf updates are available, send email notification from Most of the new gTLDs are not allowed and a popup window appears stating that "Following email IDs are not in valid format:' For a list of the new gTLDs see https://tld-list.com/tlds-from-a-z

I am having trouble uploading files after migrating the site from local environment to the web. Following is the relevant section of code from a coldfusion function that uploads files using BlueImp: <cffunction name="POST" access="private" returnformat="json"> <cfargument name="options" type="struct" required="true"> <cfargument name="listing_id" type="any" required="false" default=""> <cfset var result = 0 > <cfset var vThumbnail = 0 > <cfset var fileInfo = "" > <cfset var fileName = "" > <cftry> <cfset fileInfo = GetFileInfo(form['files[]']) /> <!---<cfdump var="#fileInfo#"><cfabort>---> ...In my local environment, selecting a file produces the following, which is a dump of the form variables used by the function:LOCAL DEV ENVIRONMENTThen BlueImp does its thing via the POST function shown above and the <cfdump var="#fileInfo#"&gt

Hello, everyone. After installing Patch 7 of ColdFusion 2023 on an existing application, the CFLOCATION tags stopped redirecting. It was redirecting properly until Patch 6. The page indicates a status code 302 in the 'network' tab of Google Chrome and shows that the next page loaded, but visually, it seems as if it didn’t load. Has anyone experienced this and knows how to solve it? Thank you all for your help.

Hi,I am receiving the error message: "The getSpMetadataForAdmin method was not found." when I click on an existing SP to edit it. I also get the message when I add a new SP. It adds the SP but then throws the error when try to display it. Adding and editing an IDP is fine. I am on CF 2021 Standard. I upgraded to update 12 from 5 and changed the JVM to 11.0.26 and uninstalled and reinstalled the SAML package to try to fix this but I still get the error. It seems manually modifying the neo-saml.xml file does not work either without restarting CF, but that is still unclear. Has anyone else experienced this or know how I can fix it?Thanks,Dom

This server is running ColdFusion 2021 Update 18. I'm attempting to edit an existing Service provider in the SP Configuration section of the Administrator. the page throws the following error in the Application log:  "Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"and a similar error in the coldfusion-out log: "Error","http-nio-8544-exec-5","04/17/25","08:40:48","cfadmin","Variable KEYSTOREPATH is undefined. The specific sequence of files included or processed is: F:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\security\spedit.cfm, line: 487"When I orginally configured this the keystore entry was present. The configuration works, our developers are able to write code against the SP Config, but editing it is not possible. 

My CF2021 box is failing security because even though I have uninstalled the search module from CFAdmin, Jetty itself is running an old version of SOLR inside Lucene.  Here's how I know this: GET http://server:8993/solr/admin/info/system HTTP/1.1 Under lucene: lucene-impl-version=7.2.1 b2b6438b37073bee1fca40374e85bf91aa457c0b - ubuntu - 2018-01-10 00:48:43 lucene-spec-version=7.2.1 solr-impl-version=7.2.1-SNAPSHOT unknown - Administrator - 2022-07-19 19:20:55 solr-spec-version=7.2.1 Is there a way I can disable lucene?  It looks like it's used for indexing/searching, and I have no use for it.