CVE-2024-20767
HIGH KEV NUCLEICVE-2024-20767 - Adobe Coldfusion Arbitrary File Read
Title source: metasploitExploitation Summary
CVE-2024-20767 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 16, 2024.
EIP tracks 7 public exploits from researchers including İbrahimsql, yoryio, Chocapikk, including a Metasploit module auxiliary/gather/coldfusion_pms_servlet_file_read.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit targets Adobe ColdFusion 2023.6 (CVE-2024-20767) to achieve remote file read by leveraging a directory traversal vulnerability in the logging module. It retrieves a UUID via an admin API endpoint and uses it to read arbitrary files.
Description
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interaction. Exploitation of this issue requires the admin panel be exposed to the internet.
Exploits (7)
This exploit targets Adobe ColdFusion 2023.6 (CVE-2024-20767) to achieve remote file read by leveraging a directory traversal vulnerability in the logging module. It retrieves a UUID via an admin API endpoint and uses it to read arbitrary files.
The repository contains a functional Python exploit for CVE-2024-20767, an arbitrary file read vulnerability in Adobe ColdFusion. The exploit leverages improper access control to read files by chaining two endpoints: one to obtain a UUID and another to read files using directory traversal.
This repository contains a functional exploit for CVE-2024-20767, an arbitrary file read vulnerability in Adobe ColdFusion due to improper access control. The exploit retrieves a UUID from the target server and uses it to read sensitive files (e.g., /etc/passwd or Windows/ServerStandardEval.xml) via a path traversal attack.
The repository contains a functional Python exploit for CVE-2024-20767, an Improper Access Control vulnerability in Adobe ColdFusion. The exploit retrieves a UUID from the target's server manager endpoint and uses it to read arbitrary files via a path traversal attack.
The repository contains a functional Python script that exploits CVE-2024-20767, an arbitrary file read vulnerability in Adobe ColdFusion servers via the Performance Monitoring Toolset (PMS) endpoint. The exploit leverages a directory traversal technique to read files from the server.
The repository contains a functional Python exploit for CVE-2024-20767, targeting Adobe ColdFusion. It leverages a vulnerable endpoint to obtain a UUID and another endpoint to read arbitrary files, demonstrating an information leak vulnerability.
This Metasploit module exploits CVE-2024-20767, an arbitrary file read vulnerability in Adobe ColdFusion. It retrieves a UUID from the servermanager.cfc endpoint and uses it to read files via the /pms endpoint with directory traversal.
Nuclei Templates (1)
http.component:"Adobe ColdFusion"
References (2)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N