VulnerabilitycriticalExploited in the wild

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

Help Net Securityby @zeljkazorzJul 20, 2023 · 07:53 UTC (Jul 20, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-29298 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-29298 CVE-2023-38203 CVE-2023-29300 CVE-2023-29301 CVE-2023-38205

Tags: cve-2023-29298 cve-2023-38203 cve-2023-29300 cve-2023-29301 cve-2023-38205 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-29300 +2 related CVEs CVE-2023-29298 CVE-2023-29301	Deserialization of Untrusted Data RCE in Adobe ColdFusion (CVE-2023-29300)	9.8 group max	100%	KEVRansomware	Jul 12, 2023 KEV Jan 8, 2024
CVE-2023-38203	Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited)	9.8	97%	KEVRansomware	Jul 20, 2023 KEV Jan 8, 2024
CVE-2023-38205	Security Feature Bypass in Adobe ColdFusion Exposes Admin CFM/CFC Endpoints	7.5	100%	KEV	Sep 14, 2023 KEV Jul 20, 2023

From the original article

2 min read at helpnetsecurity.com

Attackers are exploiting two Adobe ColdFusion vulnerabilities (CVE-2023-29298, CVE-2023-38203) to breach servers and install web shells to enable persistent access and allow remote control of the system, according to Rapid7 researchers.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.