Adobe ColdFusion - Authentication Bypass (CVE-2023-29298)

CVE-2023-29298 is an improper access control vulnerability in Adobe ColdFusion that allows attackers to bypass security features and gain unauthorized access to administrative CFM and CFC endpoints. This flaw can be exploited remotely without user interaction, potentially enabling attackers to compromise sensitive administrative functions and escalate their privileges.

CrowdSec has been tracking this vulnerability and its exploits since 12th of June 2025.

Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2023-29298 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. CrowdSec data also reveals a clear uptick in attacks involving CVE-2023-29298 over the past week. Activity is above the usual baseline, suggesting growing attention from attackers. This may reflect rising awareness, recent exploit releases, or expanded targeting efforts.

Attackers exploit this vulnerability by requesting .cfc or .cfm files under the //CFIDE/ path, bypassing access controls and gaining unauthorized access to ColdFusion administrative endpoints.