cve/2023/CVE-2023-29300.md

CVE-2023-29300

Description

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/sectool
• https://github.com/DarkFunct/CVE_Exploits
• https://github.com/Ostorlab/KEV
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/TrojanAZhen/Self_Back
• https://github.com/XRSec/AWVS-Update
• https://github.com/Y4tacker/JavaSec
• https://github.com/ggjkjk/1444
• https://github.com/gobysec/Research
• https://github.com/ibaiw/2023Hvv
• https://github.com/passwa11/2023Hvv_