Description
Adobe ColdFusion 的 /CFIDE/wizards/common/utils.cfc 组件存在权限绕过漏洞（CVE-2023-38205）。攻击者可通过构造特殊请求绕过身份验证机制，直接访问受限功能或敏感数据。该漏洞源于对用户输入验证不足，导致未授权操作可能被执行。
Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞（CVE-2023-38205）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-38205
https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
https://www.rapid7.com/blog/post/2023/07/19/cve-2023-38205-adobe-coldfusion-access-control-bypass-fixed/
https://hackerone.com/reports/2090435
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38205.yaml
https://www.sentinelone.com/vulnerability-database/cve-2023-38205/
https://www.tenable.com/cve/CVE-2023-38205
https://fortiguard.fortinet.com/encyclopedia/dynamic-application-security-testing/81