Active Exploitation of Adobe ColdFusion Critical Vulnerabilities

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Hackers are actively exploiting vulnerabilities in Adobe ColdFusion, specifically CVE-2023-29298 and CVE-2023-38203. These vulnerabilities allow attackers to bypass authentication, execute remote code, and gain unauthorized access to vulnerable servers.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.