CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-09-14
Adobe ColdFusion Access Control Bypass and Administrator Endpoint Exposure Vulnerability (CVE-2023-38205) Technical Advisory
[Affected Scope] Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier), and 2023u2 (and earlier)
[Impact] Unauthenticated remote attackers can bypass security filters to access administrative CFM and CFC endpoints, potentially leading to remote code execution (RCE)
[Mitigation] Immediately apply the official Adobe security patch (APSB23-47) and restrict external access to ColdFusion administrator consoles