References https://nvd.nist.gov/vuln/detail/CVE-2023-29300 https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Adobe-ColdFusion-XML-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2023-29300.md https://nosec.org/m/share/5099.html https://rivers.chaitin.cn/blog/cq9k4c10lnechd245jag https://avd.aliyun.com/detail?id=AVD-2023-29300 https://projectdiscovery.io/blog/adobe-coldfusion-rce https://www.rapid7.com/blog/post/2023/07/17/etr-active-exploitation-of-multiple-adobe-coldfusion-vulnerabilities/ https://teamt5.org/tw/posts/alerts-of-exploiting-adobe-cold-fusion-cve-2023-29300/ https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml
Related VulnerabilitiesPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File WritePoCCVE-2026-48313: ColdFusion - Path TraversalAdobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)PoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure DeserializationPoCcoldfusion-cfide-dir-listing: Adobe ColdFusion CFIDE - Directory ListingPoCaem-jcr-exposure: Adobe AEM JCR Compare ExposurePoCaem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node CreationAdobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞(CVE-2025-54236)Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞(CVE-2023-38205)(CVE-2025-54253)Adobe Experience Manager配置错误导致任意代码执行漏洞