Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13 9.0.1 before Update 12 9.0.2 before Update 7 10 before Update 14 and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.