CVE-2018-15961criticalunder attackCWE-434

CVE-2018-15961: critical vulnerability in Adobe ColdFusion

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon72 days
Published on NVDSep 25
1st PoC+72d
metasploitSep 11
CISA KEV+1135d
exploitation probability
100%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
12 public exploit(s)
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Adobe ColdFusion allows attackers to upload files without proper restrictions, potentially leading to malicious code execution on the server. This is a critical flaw because it can give attackers complete control over the affected system.

Technical detail

An unrestricted file upload vulnerability (CWE-434) in Adobe ColdFusion enables attackers to bypass upload validation controls and execute arbitrary code on the server. Exploitation requires network access to the upload functionality; successful code execution compromises the entire application and underlying system integrity.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Adobe · ColdFusion
public PoCs found — 12
exploitdbwww.exploit-db.com/exploits/45979unverifiedgithubgithub.com/vah13/CVE-2018-15961★ 9githubgithub.com/xbufu/CVE-2018-15961★ 3githubgithub.com/orangmuda/CVE-2018-15961★ 2githubgithub.com/cved-sources/cve-2018-15961★ 1githubgithub.com/bu1xuan2/CVE-2018-15961★ 0vulncheckvulncheck.com/xdb/e612ae98d71funverifiedvulncheckvulncheck.com/xdb/2064f6e531deunverifiedvulncheckvulncheck.com/xdb/4b30bcb1fa25unverifiedvulncheckvulncheck.com/xdb/82ee6a663df4unverifiedcve_referencewww.exploit-db.com/exploits/45979/unverifiedvulncheckvulncheck.com/xdb/30b10a753cfbunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Adobe ColdFusion

In the same product, most dangerous first.

CVE-2023-29300CRITICALAdobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionEPSS 100.0%KEVCVE-2023-29298HIGHAdobe ColdFusion Improper Access Control Security feature bypassEPSS 99.8%KEVCVE-2023-38205HIGHColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298EPSS 99.8%KEVCVE-2024-20767HIGHColdFusion | Improper Access Control (CWE-284)EPSS 98.5%KEVCVE-2023-26360HIGHAdobe ColdFusion Improper Access Control Arbitrary code executionEPSS 97.3%KEVCVE-2023-38203CRITICALAnalysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCEEPSS 97.1%KEV
References
https://helpx.adobe.com/security/products/coldfusion/apsb18-33.htmlhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15961https://www.exploit-db.com/exploits/45979/http://www.securityfocus.com/bid/105314http://www.securitytracker.com/id/1041621