.. / CVE-2023-38205

• Access Control
• Nuclei
• Web

Exploit for Adobe ColdFusion - Access Control Bypass (CVE-2023-38205)

Description:

There is an access control bypass vulnerability in Adobe ColdFusion versions 2023 Update 2 and below, 2021 Update 8 and below and 2018 update 18 and below, which allows a remote attacker to bypass the ColdFusion mechanisms that restrict unauthenticated external access to ColdFusion’s Administrator.

Nuclei Template

View the template here CVE-2023-38205.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-38205.yaml

References: