CrowdSecLive Exploit Tracker
00/10
CrowdSec Score

Adobe ColdFusion - Authentication Bypass (CVE-2023-29298)

Published on12-07-2023
First seen on07-07-2025
XXX
Exploiting IPs reported

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

CrowdSec analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Exploitation

Get real-time information about exploitation attempts and actors involved.

Exploit Timeline

This timeline shows the history of exploitation attempts for this CVE, as detected by the CrowdSec community.

Unlock the Exploitation timeline with the
CrowdSec Live Exploit Tracker plan

Detected IPs

Discover the IPs that targeted this vulnerability across the CrowdSec Network.

Protection

Find out relevant information to protect your stack against this CVE.

glow

Stay Protected against CVE Exploiters

Quick Download icon

Quick Download

Get the list of IPs exploiting this vulnerability

Download
Firewall Sync icon

Firewall Sync

Sync with your firewall a live feed of IPs exploiting this vulnerability

Sync
JSON Live Feed icon

JSON Live Feed

Access a dedicated API endpoint to get a live JSON feed

Get The Feed