Description
Adobe ColdFusion 是 Adobe 公司开发的用于 Web 应用程序开发的商业应用程序服务器。该漏洞存在于 ColdFusion 的 /CFIDE/adminapi/accessmanager.cfc 接口中，攻击者可向 ColdFusion 服务器发送不受信任的序列化数据并触发反序列化，从而执行任意代码。
Adobe ColdFusion /CFIDE/adminapi/accessmanager.cfc 代码执行漏洞（CVE-2023-29300）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-29300
https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html
https://projectdiscovery.io/blog/adobe-coldfusion-rce
https://pentest-tools.com/vulnerabilities-exploits/adobe-coldfusion-remote-code-execution_19
https://teamt5.org/jp/posts/alerts-of-exploiting-adobe-cold-fusion-cve-2023-29300/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml
https://www.sentinelone.com/vulnerability-database/cve-2023-29300/
https://big5-sec.github.io/posts/ColdFusion-WDDX-2023/
https://www.fortinet.com/blog/threat-research/multiple-threats-target-adobe-coldfusion-vulnerabilities
https://appcheck-ng.com/cve-2023-29300/