CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
- CISA KEV-listed (remediation due 2024-01-29)
- used in ransomware campaigns
- EPSS 93.8% (99.9% percentile)