Description
Adobe Coldfusion存在不安全的反序列化漏洞。此漏洞是由于对用户输入的argumentCollection参数缺乏校验导致的。
Adobe Coldfusion CVE-2023-44353 不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-44353
https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html
https://www.tenablecloud.cn/plugins/was/114242
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44353.yaml
https://osv.dev/vulnerability/CVE-2023-44353
https://www.acunetix.com/vulnerabilities/web/coldfusion-wddx-deserialization-rce-cve-2023-44353/
https://pentest-tools.com/vulnerabilities-exploits/adobe-coldfusion-wddx-deserialization-gadgets_22448