Lucene search

China National Vulnerability DatabaseCNVD-2023-100311

HistoryNov 21, 2023 - 12:00 a.m.

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2023-100311)

2023-11-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

adobe coldfusion

united states

rapid application development

integrated development environment

scripting language

cross-site scripting

vulnerability

filtering

escaping

user-supplied data

application

attacker

arbitrary web script

html

payload

cnvd-2023-100311

6.4 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

Adobe ColdFusion is the United States Odo than (Adobe) company’s set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the application, the vulnerability is exploited by an attacker to execute arbitrary Web script or HTML by injecting a carefully crafted payload.