writeups.xyz / Adobe ColdFusion Pre-Auth RCE(s)

Submitter : c2a

Date: 12 July 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• ColdFusion
• JNDI Injection
• Insecure Deserialization
• Security Code Review
• Patch Diffing

Programs :

• Adobe (ColdFusion)

Authors :

• Harsh Jaiswal (@Rootxharsh)
• Rahul Maini (@Iamnoooob)

Link :
https://blog.projectdiscovery.io/adobe-coldfusion-rce/