Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
| https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Jun 2024, 13:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other | |
| References | () http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry |
01 May 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
| References |
|
28 Mar 2023, 13:01
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-23 20:15
Updated : 2024-06-28 13:41
NVD link : CVE-2023-26360
Mitre link : CVE-2023-26360
CVE.ORG link : CVE-2023-26360
JSON object : View
Products Affected
adobe
- coldfusion
CWE