CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
- CISA KEV-listed (remediation due 2024-01-29)
- used in ransomware campaigns
- EPSS 100.0% (100.0% percentile)
- CVSS 9.8 critical