References https://nvd.nist.gov/vuln/detail/CVE-2023-53880 https://cve.imfht.com/detail/CVE-2023-53880 https://cve.scap.org.cn/vulnerability/VHN-340947 https://github.com/advisories/GHSA-fj37-48wv-9r2p https://security.snyk.io/vuln/SNYK-JAVA-ORGLUCEE-14427044 https://access.redhat.com/security/cve/cve-2023-53880 https://cvefeed.io/vuln/detail/CVE-2023-53880 https://vulnerability.circl.lu/vuln/cve-2023-53880 https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-53880
Related VulnerabilitiesPoCLucee /lucee/admin/web.cfm 默认口令漏洞PoCCVE-2021-21307: Lucee Admin - Remote Code ExecutionPoClucee-default-login: Lucee - Default LoginPoClucee-stack-trace: Lucee Stack Trace ErrorPoClucee-rce: Lucee < 6.0.1.59 - Remote Code ExecutionPoClucee-unset-credentials: Lucee - Unset CredentialsPoClucee-xss: Lucee - Cross-Site ScriptingLucee Admin前台命令执行 (CVE-2021-21307)Lucee Admin 远程代码执行漏洞