CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-07-20
Adobe ColdFusion Deserialization Remote Code Execution (RCE) Security Advisory (CVE-2023-38203)
[Affected Scope] Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier), and 2023u1 (and earlier)
[Impact] Unauthenticated remote attackers can exploit a Deserialization of Untrusted Data vulnerability (CWE-502) to execute arbitrary code with system privileges
[Mitigation] Immediately apply the official Adobe security patches (APSB23-41), restrict external access, and enable WAF rules