1name: crowdsecurity/vpatch-CVE-2023-38205
2description: "Adobe ColdFusion Access Control Bypass (CVE-2023-38205)"
3rules:
4  - and:
5    - zones:
6      - URI
7      transform:
8      - lowercase
9      match:
10        type: contains
11        value: ..cfide/wizards/common/
12labels:
13  type: exploit
14  service: http
15  confidence: 3
16  spoofable: 0
17  behavior: "http:exploit"
18  label: "Adobe ColdFusion - Access Control Bypass"
19  classification:
20   - cve.CVE-2023-38205
21   - attack.T1595
22   - attack.T1190
23   - cwe.CWE-284