CVE

CVE-2023-38203

P1⬤ KNOWN RANSOMWARE USE

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusion

Date added (CISA)

2024-01-08

Remediation due

2024-01-29

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.