writeups.xyz / Unauthenticated RCE in Adobe Coldfusion – CVE-2023-26360

Submitter : c2a

Date: 10 January 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization
• Arbitrary File Read
• Patch Diffing
• Security Code Review

Programs :

• Adobe (ColdFusion)

Authors :

• SecureLayer7 (@SecureLayer7)

Link :
https://blog.securelayer7.net/unauthorized-rce-in-adobe-coldfusion/