ColdFusion 2023, 2021, and 2018 July 2023 Security Updates

We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2023 release) Update 1 ColdFusion (2021 release) Update 7 ColdFusion (2018 release) Update 17 In these updates, we’ve fixed a few security bugs mentioned in the security bulletin, APSB23-40. We’ve also refreshed ColdFusion lockdown installers. You can find the refreshed installers on the ColdFusion downloads page. For more information, see the tech notes below: ColdFusion (2023 release) Update 1 ColdFusion (2021 release) Update […]

Fix for CF Issue 4211276 (MariaDB/mySQL Date error)

Posting some information here about an issue related to mySQL date errors in CF2021. Error posted here: CF-4211276 | Tracker (adobe.com) The thread is a long one, but these items should focus it down to a concise solution. If you are encountering this issue in CF2023, adding Dcoldfusion.jdbc.mysql.datetime.str=true to the JVM arguments should resolve the issue. For CF2021, there are the following patches available: 2021: https://cfdownload.adobe.com/pub/adobe/coldfusion/PR/cf2021/patches/4211276/hf202100-4211276.jar & 2018: https://cfdownload.adobe.com/pub/adobe/coldfusion/PR/cf2021/patches/4211276/hf201800-4211276.jar The detail with the “two different JVM arguments” comes from a […]

CFSETUP Not Exporting the Client Sessions Configuration

I’m using CFSetup.SH to export my ColdFusion Settings then re-import them into a Docker Container. The client session settings do not seem to be exportable. So every time I start my container I have to log in the the CF admin select the datasource from the dropdown and select it as my client store. Is there something I’m missing or is this a setting that is not exportable but should be? Chris

SAML SSO Issue

Hi, I’m trying to implement SAML SSO for a client and I’m getting the error: “Possible replay attack occurred as there is no login/logout information associated with this request.” Code: <cfset config = { idp = {name = “ClientName”}, sp = {name = “TestSP”}, relayState = “cart” }> <cfset InitSAMLAuthRequest(config)> <cfset response = ProcessSAMLResponse(“ClientName”,”TestSP”)> The SP config is simple and show in the image. The IDP is using a SAML URL from the client. I’ve not been able to find […]

Will the latest version of Eclipse (2023-06) work with ColdFusion Builder 2018?

I’ve installed ColdFusion Builder 2018.  Eclipse was not already installed, so I used the stand-alone version.  I want to use SVN.  I installed Subversion through the Eclipse Marketplace.  Since the SVN connectors do not come with Subversion, I must install them separately.  I haven’t been able to install them through the marketplace (they don’t appear when I search), through the SVN tab in Eclipse preferences ( I get the error “Connector discovery completed without finding any connectors”), or when I […]

Introduction to ColdFusion 2023

The next Hawaii ColdFusion User Group meeting is on a Introduction to ColdFusion 2023. Come join us in the meeting and learn what’s new to ColdFusion 2023! Please RSVP here – https://www.meetup.com/hawaii-coldfusion-meetup-group/events/293602592/

Simple Secure Code ChatGPT Demo

If you haven’t heard, there’s this cool new thing the kids are doing called “AI”. I’m not sure what that stands for, but it is very popular. One of these AIs is a Large Language Model called ChatGPT, which comes in a variety of flavors (and costs!). Today I wanted to show you how easy it is to build a simple little app that will send the code in one your files in to ChatGPT and have it check for […]

Multifactor Authentication Support (MFA)

I have a project where I need MFA to a cell phone. Is there any MFA documentation in ColdFusion?

ColdFusion 2023 – Google Cloud Platform – FireStore

Cloud Firestore is a flexible, scalable NoSQL cloud database to store and sync data for client- and server-side development. It offers seamless integration with other Firebase and Google Cloud products. Here are some use cases where Firestore can be effectively applied: Real-Time Applications: Firestore allows real-time listeners to be attached to data, enabling the development of applications that require real-time updates like collaborative tools, real-time analytics, dashboards, or gaming leaderboards. Offline Synchronization: Firestore supports automatic offline data persistence. This is […]

ColdFusion 2023 – GraphQL Client

GraphQL is a query language for APIs and a runtime for executing those queries with your existing data. It provides a more efficient, powerful, and flexible alternative to REST. In ColdFusion 2023 we are providing a native method of consuming and sending data across GraphQL using GQL. This includes support for fragments, variables, aliases, queries, mutations, subscriptions and more. In future versions of ColdFusion we will add the ability to expose your own data as GraphQL endpoints, but in the […]

ColdFusion 2023 – Google Cloud Platform – Storage

Google Cloud Storage is a scalable, fully-managed, secure, and highly available object/blob storage service from Google Cloud. It’s designed to handle data from any source and can serve data to any destination. You can do just about anything with it that requires storing and accessing files and data, but here are a few potential use cases: Backup and Archival: Google Cloud Storage can be used to store backups of your data, whether it’s from your on-premises servers or from other […]