VulnerabilitycriticalExploited in the wild

New Vulnerabilities Found in Adobe ColdFusion

Infosecurity Magazineby Kevin PoireaultJul 18, 2023 · 17:30 UTC (Jul 18, 2023)2 min read3

Read at infosecurity-magazine.com

Analyze CVE-2023-29298 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-29298 CVE-2023-29300 CVE-2023-38203

Tags: cve-2023-29298 cve-2023-29300 cve-2023-38203 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-29300 +1 related CVE CVE-2023-29298	Deserialization of Untrusted Data RCE in Adobe ColdFusion (CVE-2023-29300)	9.8 group max	100%	KEVRansomware	Jul 12, 2023 KEV Jan 8, 2024
CVE-2023-38203	Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited)	9.8	97%	KEVRansomware	Jul 20, 2023 KEV Jan 8, 2024

From the original article

2 min read at infosecurity-magazine.com

Security researchers from Rapid7 have found active exploitation of multiple vulnerabilities in Adobe ColdFusion, a web development computing platform.

Infosecurity Magazine

By Kevin Poireault · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.