References https://helpx.adobe.com/cn/security/products/coldfusion/apsb23-41.html https://avd.aliyun.com/detail?id=AVD-2023-38203 https://nvd.nist.gov/vuln/detail/cve-2023-38203 https://zone.ci/aliyun/ali_nvd/24819.html https://cloud.tencent.cn/developer/information/ColdFusion%E7%BC%A9%E7%95%A6%E5%9B%BE%E7%BC%96%E5%8F%B7%E4%B8%8D%E6%AD%A3%E7%A1%AE https://projectdiscovery.io/blog/adobe-coldfusion-rce https://www.sentinelone.com/vulnerability-database/cve-2023-38203/ https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38203.yaml
Related VulnerabilitiesPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File WritePoCCVE-2026-48313: ColdFusion - Path TraversalAdobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)PoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure DeserializationPoCcoldfusion-cfide-dir-listing: Adobe ColdFusion CFIDE - Directory ListingPoCaem-jcr-exposure: Adobe AEM JCR Compare ExposurePoCaem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node CreationAdobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞(CVE-2025-54236)Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞(CVE-2023-38205)(CVE-2025-54253)Adobe Experience Manager配置错误导致任意代码执行漏洞