CVE-2023-38205.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.

EXPLOITATION STATUSCISA known exploitedAdded Jul 20, 2023

RECORD STATUSAwaiting NVD dataModified Jul 20, 2023

Disclosure summary

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

PUBLISHED 2023-07-20T00:00:00-04:00
MODIFIED 2023-07-20T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00