跳转到帖子

APSB24-71: Security updates available for ColdFusion (CVE-2024-41874)

recommended_posts

发布于
  • Members

APSB24-71: Security updates available for ColdFusion (CVE-2024-41874)

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
09/10/2024
Created
09/14/2024
Added
09/13/2024
Modified
01/28/2025

Description

ColdFusion versions 2023.9, 2021.15 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability by providing crafted input to the application, which when deserialized, leads to execution of malicious code. Exploitation of this issue does not require user interaction.

Solution(s)

  • adobe-coldfusion-2021-release-update-16
  • adobe-coldfusion-2023-release-update-10

References

  • https://attackerkb.com/topics/cve-2024-41874
  • CVE - 2024-41874
  • https://helpx.adobe.com/security/products/coldfusion/apsb24-71.html
  • 查看数 698
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…