CyberSec.Space Logo
返回 CVE 浏览器

CVE-2023-38203

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-07-20
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦
Adobe

Coldfusion

= 2018= 2021= 2023

References & Advisories

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38203

相關資安分析文章

全球网络威胁情报摘要：2026 年 7 月 21 日

本期威胁情报分析 VMware vCenter、F5 BIG-IP 与 GitLab 关键漏洞安全修补警讯，同时汇总最新医疗与关键基础设施平台遭勒索软件攻击之防御防范措施。

2026-07-21

相关漏洞威胁

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...