CVE-2023-38203 Adobe ColdFusion
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
- CVSS
- not scored
On CISA’s exploited list
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Added
- 2024-01-08
- Federal patch deadline
- 2024-01-29
- Ransomware use
- known