Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 17, 2021.x update 7, or 2023.x update 1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-40 advisory. - Improper Access Control CWE-284 potentially leading to Security...

CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC...

CVE-2023-29298

Adobe ColdFusion is affected by CVE-2023-29298, a unauthenticated Improper Access Control vulnerability that could bypass security features to reach the administration CFM/CFC endpoints. Affected versions include ColdFusion 2018u16 and earlier, 2021u6 and earlier, and 2023.0.0.330468 and earlier....

CVE-2023-29298

creationtimestamp| type| source ---|---|--- 2023-07-12 12:20:15+00:00| published-proof-of-concept| Telegram/LnxBMeCnuVAE5QweLhPpKzZNVyjKtx8yCZ6zDmYsY1VA 2023-07-12 17:15:14+00:00| published-proof-of-concept| https://t.me/ProgrammerTech/7305 2023-07-12 17:19:41+00:00| published-proof-of-concept|...