CVE-2023-29300—Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

PUBLISHEDvulnerability record
2024-01-08 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2023-29300
项目：
Adobe
产品：
ColdFusion
添加日期：
2024-01-08
到期日：
2024-01-29
最后更新：
June 21, 2025

漏洞名称

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

描述

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

已知用于勒索软件活动吗？

勒索软件状态：
KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

  • https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html
  • https://nvd.nist.gov/vuln/detail/CVE-2023-29300

相关新闻文章

相关 CWE

browse all CVEs