ColdFusion_EXp

Herramienta de reverse shell para explotar CVE-2023-29298/CVE-2023-26360 Introducción El principio de la vulnerabilidad es que los datos que construimos en la solicitud del cliente CFML se guardan en coldfusion-out.log del servidor. Este directorio registra la información de errores de la...

Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 17, 2021.x update 7, or 2023.x update 1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-40 advisory. - Improper Access Control CWE-284 potentially leading to Security...

CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC...

CVE-2023-29298

Adobe ColdFusion is affected by CVE-2023-29298, a unauthenticated Improper Access Control vulnerability that could bypass security features to reach the administration CFM/CFC endpoints. Affected versions include ColdFusion 2018u16 and earlier, 2021u6 and earlier, and 2023.0.0.330468 and earlier....

CVE-2023-29298

creationtimestamp| type| source ---|---|--- 2023-07-12 12:20:15+00:00| published-proof-of-concept| Telegram/LnxBMeCnuVAE5QweLhPpKzZNVyjKtx8yCZ6zDmYsY1VA 2023-07-12 17:15:14+00:00| published-proof-of-concept| https://t.me/ProgrammerTech/7305 2023-07-12 17:19:41+00:00| published-proof-of-concept|...