Metasploit Weekly Wrap-Up

Throw another log [file] on the fire

Our own Stephen Fewer authored a module targeting CVE-2023-26360 affecting ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier. The vulnerability allows multiple paths to code execution, but our module works by leveraging a request that will

code code execution coldfusion cve cve-2023-26360 file fire log metasploit metasploit weekly wrapup own request targeting update vulnerability weekly wrap-up