References https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html https://nvd.nist.gov/vuln/detail/CVE-2024-20767 https://jeva.cc/2973.html https://github.com/yoryio/CVE-2024-20767 https://blog.csdn.net/dongfangycddd/article/details/144476102 https://www.secrss.com/articles/64734 https://avd.aliyun.com/detail?id=AVD-2024-20767 https://www.lmboke.com/archives/adobe-coldfusionren-yi-wen-jian-du-qu-lou-dong-cve-2024-20767-poc https://cloud.tencent.com/developer/article/2404233 https://github.com/Sec-Fork/POC-20241008/blob/main/Adobe%20ColdFusion/Adobe-ColdFusion%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9ECVE-2024-20767.md https://cn-sec.com/archives/2623465.html https://www.cve.org/CVERecord?id=CVE-2024-20767
Related VulnerabilitiesPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File WritePoCCVE-2026-48313: ColdFusion - Path TraversalAdobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)PoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure DeserializationPoCcoldfusion-cfide-dir-listing: Adobe ColdFusion CFIDE - Directory ListingPoCaem-jcr-exposure: Adobe AEM JCR Compare ExposurePoCaem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node CreationAdobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞(CVE-2025-54236)Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞(CVE-2023-38205)(CVE-2025-54253)Adobe Experience Manager配置错误导致任意代码执行漏洞