CVE

CVE-2023-38205

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion

Date added (CISA)

2023-07-20

Remediation due

2023-08-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.