Coldfusion 2023 Fileupload-1.5.jar Vulnerability

[ruslanr63825226]

Tenable Security scan has identified Fileupload-1.5.jar as a high Vulnerability. Is this a false positive ? 

C:\ColdFusion2023\bundles\repo\commons-fileupload-1.5.jar Installed version : 1.5 Fixed version : 1.6 Path : C:\ColdFusion2023\bundles\updateinstallers\hotfix-packages-cf2023-016-330828\repo\commons-fileupload-1.5.jar Installed version : 1.5 Fixed version : 1.6 Path : C:\ColdFusion2023\bundles\updateinstallers\hotfix-packages-cf2023-016-330828\repo\commons-fileupload-1.4.jar Installed version : 1.4 Fixed version : 1.6 Path : C:\ColdFusion2023\cfusion\lib\bundleaxis\commons-fileupload-1.5.jar Installed version : 1.5 Fixed version : 1.6 Path :

[BKBK]

Hi @ruslanr63825226 , thanks for sharing that.

It is an important alert. I have therefore created a bug ticket requesting a fix.