VulnerabilitycriticalExploited in the wild

Adobe warns customers of critical ColdFusion RCE exploited in attacks

Security Affairsby @securityaffairsJul 17, 2023 · 21:06 UTC (Jul 17, 2023)1 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-29300 CVE-2023-29298 CVE-2023-29301 CVE-2023-26360

Tags: cve-2023-29300 cve-2023-29298 cve-2023-29301 cve-2023-26360 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-26360	Unauthenticated RCE via Improper Access Control in Adobe ColdFusion	8.6	97%	KEVPoC	Mar 23, 2023 KEV Mar 15, 2023
CVE-2023-29300 +2 related CVEs CVE-2023-29298 CVE-2023-29301	Deserialization of Untrusted Data RCE in Adobe ColdFusion (CVE-2023-29300)	9.8 group max	100%	KEVRansomware	Jul 12, 2023 KEV Jan 8, 2024

From the original article

1 min read at securityaffairs.com

Adobe is warning customers of a critical ColdFusion pre-authentication RCE bug, tracked as CVE-2023-29300, which is actively exploited. Adobe warns customers of a critical ColdFusion pre-authentication remote code execution vulnerability, tracked as CVE-2023-29300 (CVSS score 9. 8), that is actively exploited in attacks in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.