exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from ma4ter

CVE-2024-20767 Adobe Coldfusion Arbitrary File Read

Posted Aug 31, 2024

Authored by jheysel-r7, yoryio, ma4ter, Christiaan Beek | Site metasploit.com

This Metasploit module exploits an Improper Access Vulnerability in Adobe Coldfusion versions prior to version 2023 Update 6 and 2021 Update 12. The vulnerability allows unauthenticated attackers to request authentication token in the form of a UUID from the /CFIDE/adminapi/_servermanager/servermanager.cfc endpoint. Using that UUID attackers can hit the /pms endpoint in order to exploit the Arbitrary File Read Vulnerability.

tags | exploit, arbitrary

advisories | CVE-2024-20767

SHA-256 | e89b9c55f15b5bbc361d35004fa9ae593f647615c4b1b4703a7b67d828ea9ff3

Download | Favorite | View