Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-44353

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

9.8
CVSS
80.2%
EPSS (exploit prob.)
100th
EPSS percentile
2023-11-17
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Affected products

VendorProductAffected versions
adobecoldfusion< 2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-44353