CVE-2023-38204: Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
Published Sep 14, 2023
·Updated
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Affected Software
30 affected components
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Adobe ColdFusion=2018-update10
Adobe ColdFusion=2018-update11
Adobe ColdFusion=2018-update12
Adobe ColdFusion=2018-update13
Adobe ColdFusion=2018-update14
Adobe ColdFusion=2018-update15
Adobe ColdFusion=2018-update16
Adobe ColdFusion=2018-update18
Adobe ColdFusion=2018-update2
Adobe ColdFusion=2018-update3
Adobe ColdFusion=2018-update4
Adobe ColdFusion=2018-update5
Adobe ColdFusion=2018-update6
Adobe ColdFusion=2018-update7
Adobe ColdFusion=2018-update8
Adobe ColdFusion=2018-update9
Adobe ColdFusion=2021
Adobe ColdFusion=2021-update1
Adobe ColdFusion=2021-update2
Adobe ColdFusion=2021-update3
Adobe ColdFusion=2021-update4
Adobe ColdFusion=2021-update5
Adobe ColdFusion=2021-update6
Adobe ColdFusion=2021-update7
Adobe ColdFusion=2021-update8
Adobe ColdFusion=2023
Adobe ColdFusion=2023-update1
Adobe ColdFusion=2023-update2
Event History
Sep 14, 2023
CVE Published
via MITRE·07:40 AM
Data Sourced
via MITRE·07:40 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-38204.
2
What is the severity of CVE-2023-38204?
The severity of CVE-2023-38204 is critical with a CVSS score of 9.8.
3
Which versions of Adobe ColdFusion are affected by CVE-2023-38204?
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier), and 2023u2 (and earlier) are affected by CVE-2023-38204.
4
What is the impact of CVE-2023-38204?
CVE-2023-38204 can result in arbitrary code execution.
5
How can I mitigate CVE-2023-38204?
To mitigate CVE-2023-38204, it is recommended to update Adobe ColdFusion to the latest version available.