lint
parent
bf6b248497
commit
97d92e76e7
|
@ -8,7 +8,7 @@ info:
|
|||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2023-26347
|
||||
- https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html
|
||||
- https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html
|
||||
remediation: |
|
||||
Update to the latest version of Adobe Coldfusion
|
||||
classification:
|
||||
|
@ -32,7 +32,7 @@ http:
|
|||
- raw:
|
||||
- |
|
||||
GET /hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
|
Loading…
Reference in New Issue