Vulnerability CVE-2023-26360


Published: 2023-03-23

Description:
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

See advisories in our WLB2 database:
Topic
Author
Date
High
Adobe ColdFusion 2018,15 / 2021,5 Arbitrary File Read
Youssef Muhammad
11.03.2024

Type:

CWE-284

(Improper Access Control)

 References:
https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

Copyright 2024, cxsecurity.com

 

Back to Top