Modernize or Die® - CFML News for January 19th, 2021 - Episode 87

<p><strong>2021-01-19 Weekly News - Episode 87</strong></p><p>Watch the video version on YouTube at <a href="https://youtu.be/DHO_LXiFHII">https://youtu.be/DHO_LXiFHII</a> </p><p><strong>Hosts:</strong><br>Gavin Pickin - Software Consultant for Ortus Solutions<br>Brad Wood - Software Consultant for Ortus Solutions</p><p><br><em>Thanks to our Sponsor - Ortus Solutions</em></p><p>One way to say thanks back to Ortus Solutions, is to support CFCasts, which is releasing new content every week</p><p><br><em>Patreon Support<br></em><br>We have 33 patreons providing 61% of the funding for our Modernize or Die Podcasts via our Patreon site: <a href="https://www.patreon.com/ortussolutions">https://www.patreon.com/ortussolutions</a>. If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!<br><a href="https://www.ortussolutions.com/blog/we-need-your-help">https://www.ortussolutions.com/blog/we-need-your-help</a> </p><p><br><strong>News and Events<br></strong><br><em>Lucee Vulnerability now Public - Security researchers earn $50k after exposing critical flaw in Apple travel portal<br></em><br>Security researchers have earned a $50,000 bug bounty after uncovering a critical flaw in Apple’s travel portal.<br>Rahul Maini and Harsh Jaiswal were able to achieve remote code execution (RCE) by stringing together a string of vulnerabilities in order to exploit targeted domains.</p><p>Lucee in the sky with exploits<br>In a detailed technical write-up, Maini and Jaiswal explain how the early stage of their bug hunt narrowed their range of targets down to three hosts running on a content management system (CMS) which was back-ended by Lucee, a Java-based tag and scripting language used for web app development.<br><a href="https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal">https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal</a> <br>Apple