漏洞描述
Unauthenticated Arbitrary File Read vulnerability due to deserialization of untrusted data in Adobe ColdFusion. The vulnerability affects ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
attackerkb.comhttps://attackerkb.com/topics/F36ClHTTIQ/cve-2023-26360/rapid7-analysis↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-26360↗helpx.adobe.comhttps://helpx.adobe.com/security/products/coldfusion/apsb23-25.html↗packetstormsecurity.comhttp://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html↗github.comhttps://github.com/Ostorlab/KEV↗