CVEvulnerability

CVE-2023-44350

9.8 CRITICAL Published 2023-11-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502

Description

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Affected configurations

• adobe coldfusion (< 2021) • adobe coldfusion 2021 • adobe coldfusion 2023

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References