First published: Wed Jul 12 2023(Updated: )
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Credit: psirt@adobe.com psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe ColdFusion | =2018 | |
Adobe ColdFusion | =2018-update1 | |
Adobe ColdFusion | =2018-update2 | |
Adobe ColdFusion | =2018-update3 | |
Adobe ColdFusion | =2018-update4 | |
Adobe ColdFusion | =2018-update5 | |
Adobe ColdFusion | =2018-update6 | |
Adobe ColdFusion | =2018-update7 | |
Adobe ColdFusion | =2018-update8 | |
Adobe ColdFusion | =2018-update9 | |
Adobe ColdFusion | =2018-update10 | |
Adobe ColdFusion | =2021 | |
Adobe ColdFusion | =2021-update1 | |
Adobe ColdFusion | =2021-update2 | |
Adobe ColdFusion | =2021-update3 | |
Adobe ColdFusion | =2018-update13 | |
Adobe ColdFusion | =2018-update12 | |
Adobe ColdFusion | =2018-update11 | |
Adobe ColdFusion | =2021-update4 | |
Adobe ColdFusion | =2018-update14 | |
Adobe ColdFusion | =2021-update5 | |
Adobe ColdFusion | =2018-update15 | |
Adobe ColdFusion | =2018-update16 | |
Adobe ColdFusion | =2021-update6 | |
Adobe ColdFusion | >=2023<=2023.0.0.330468 | |
>=2023<=2023.0.0.330468 | ||
=2018 | ||
=2018-update1 | ||
=2018-update10 | ||
=2018-update11 | ||
=2018-update12 | ||
=2018-update13 | ||
=2018-update14 | ||
=2018-update15 | ||
=2018-update16 | ||
=2018-update2 | ||
=2018-update3 | ||
=2018-update4 | ||
=2018-update5 | ||
=2018-update6 | ||
=2018-update7 | ||
=2018-update8 | ||
=2018-update9 | ||
=2021 | ||
=2021-update1 | ||
=2021-update2 | ||
=2021-update3 | ||
=2021-update4 | ||
=2021-update5 | ||
=2021-update6 | ||
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for Adobe ColdFusion is CVE-2023-29300.
The severity of CVE-2023-29300 is critical.
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier), and 2023.0.0.330468 (and earlier) are affected by CVE-2023-29300.
The vulnerability CVE-2023-29300 could result in arbitrary code execution.
To fix the vulnerability CVE-2023-29300, update Adobe ColdFusion to a version that is not affected by the vulnerability.