.. / CVE-2023-29300

• RCE
• Nuclei
• Web

Exploit for Adobe ColdFusion - Pre-Auth Remote Code Execution (CVE-2023-29300)

Description:

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Nuclei Template

View the template here CVE-2023-29300.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-29300.yaml

References: