auxiliary/gather/coldfusion_pms_servlet_file_read

functional

CVE-2024-20767 - Adobe Coldfusion Arbitrary File Read

view exploit source metasploittype auxiliarypublished 2024-03-12catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-20767US	—OT critical	98.5% (100th)	KEV	2024-03-18
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.