← Back to browse · API

CVE-2023-38204

Severity
CRITICAL
CVSS
9.8
EPSS
0.66837
Risk score
62.59
CISA KEV
No
PoC
No
Published
2023-09-14
Modified
2025-02-27
First seen
2026-08-07
Aliases
EUVD-2023-42024, GHSA-77P2-6W3V-XJV8
Products
Adobe:ColdFusion 0 ≤cf2023U2
Sources
euvd EUVD-2023-42024

Description

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

References