CVE-2005-4575: PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information...

Security readout for executives and security teams

This is an old information disclosure issue in PaperThin CommonSpot Content Server 4.5 and earlier. A malformed request can cause an error page to reveal the server’s full filesystem path. That is not usually a direct compromise, but it helps attackers map the environment for later attacks. Exposure is likely limited to internet-facing or reachable PaperThin CommonSpot Content Server deployments running version 4.5 or earlier, especially legacy sites still exposing the affected ColdFusion route. Treat this as a legacy exposure cleanup item, not an emergency, unless an affected public CommonSpot server still exists. Prioritize finding and retiring or upgrading old deployments because exposed paths can support broader attack planning. Mitigation focus: Inventory any CommonSpot Content Server deployments and confirm versions.; Check PaperThin/CommonSpot vendor guidance or support records for fixed versions.; Upgrade or retire CommonSpot 4.5 and earlier where still present..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.