It was great to be a speaker at the ColdFusion DevWeek event last week. I spoke on the topic Securing ColdFusion Applications.
As promised here are the slides, and the example code I used can be found here.
In this talk I thought it would be fun to come up with a list of the Top 10 Risks or Issues ColdFusion developers should be aware of. As with any security top ten list, there are more than 10 security issues to be aware of, so this is just a starting point.
- Old Code
- Failure to Delegate
- Security Configuration
- Various Injection Attacks
- XSS
- Authentication / Authorization
- Remote Code Execution
- SQL Injection
- File System Issues
- Unpatched Known Vulnerabilities