VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2023· Updated Feb 27, 2025

Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8

CVE-2023-38204

Description

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Affected products

2
  • Adobe Inc./Coldfusionllm-fuzzy2 versions
    <=2018u18, <=2021u8, <=2023u2+ 1 more
    • (no CPE)range: <=2018u18, <=2021u8, <=2023u2
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.