CVE-2023-44355: ColdFusion | Improper Input Validation (CWE-20)
Published Nov 17, 2023
·Updated
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this issue does require user interaction.
Affected Software
19 affected components
Adobe ColdFusion<2021
Adobe ColdFusion=2021
Adobe ColdFusion=2021-update1
Adobe ColdFusion=2021-update10
Adobe ColdFusion=2021-update11
Adobe ColdFusion=2021-update2
Adobe ColdFusion=2021-update3
Adobe ColdFusion=2021-update4
Adobe ColdFusion=2021-update5
Adobe ColdFusion=2021-update6
Adobe ColdFusion=2021-update7
Adobe ColdFusion=2021-update8
Adobe ColdFusion=2021-update9
Adobe ColdFusion=2023
Adobe ColdFusion=2023-update1
Adobe ColdFusion=2023-update2
Adobe ColdFusion=2023-update3
Adobe ColdFusion=2023-update4
Adobe ColdFusion=2023-update5
Event History
Nov 17, 2023
CVE Published
01:31 PM
Data Sourced
01:31 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-44355.
2
What is the title of the vulnerability?
The title of the vulnerability is Reflected HTML Injection in coldfusion.servicelayer.ServicelayerExceptions exceptions.
3
What is the severity of CVE-2023-44355?
The severity of CVE-2023-44355 is medium (4.3).
4
Which versions of Adobe ColdFusion are affected by CVE-2023-44355?
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by CVE-2023-44355.
5
How can an unauthenticated attacker exploit CVE-2023-44355?
An unauthenticated attacker could leverage CVE-2023-44355 to impact a minor integrity feature.