CVEs-PoC/2018/CVE-2018-4939.md

CVE-2018-4939

Description

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
• https://github.com/BrittanyKuhn/javascript-tutorial
• https://github.com/Ginove/post
• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/PalindromeLabs/Java-Deserialization-CVEs
• https://github.com/dudacgf/ovr_convert
• https://github.com/eeenvik1/scripts_for_YouTrack
• https://github.com/klausware/Java-Deserialization-Cheat-Sheet
• https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet
• https://github.com/r3volved/CVEAggregate
• https://github.com/takumakume/dependency-track-policy-applier
• https://github.com/xaitax/cisa-catalog-known-vulnerabilities