CVE-2023-44355

CVSS V2 None CVSS V3 None

Description

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this issue does require user interaction.

Overview

CVE ID
CVE-2023-44355

Assigner
adobe

Vulnerability Status
PUBLISHED

Published Version
2023-11-17T13:31:33.927Z

Last Modified Date
2023-11-17T13:31:33.927Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-44355
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44355

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:24:55				Added to TrackCVE