Hello Lucee! Let us hack Apple again?
Summary
Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We've previously compromised Lucee's Admin panel, showcasing a pre-auth Remote Code Execution (RCE) on multiple Apple servers that utilized Lucee as its underlying server. Our journey led us throug
- Published
- Collected
--- id: 9301 title: "Hello Lucee! Let us hack Apple again?" source_domain: projectdiscovery.io source_url: "https://projectdiscovery.io/blog/hello-lucee-let-us-hack-apple-again" published_at: "2024-02-15T11:54:42Z" tags: ["bug-bounty", "rce"] phying_url: "https://phying.com/item/9301" lang: en --- # Hello Lucee! Let us hack Apple again? ## Summary Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We've previously compromised Lucee's Admin panel, showcasing a pre-auth Remote Code Execution (RCE) on multiple Apple servers that utilized Lucee as its underlying server. Our journey led us throug ## Intelligence Metadata - **Sources:** projectdiscovery.io - **Published:** 2024-02-15T11:54:42Z - **Original:** https://projectdiscovery.io/blog/hello-lucee-let-us-hack-apple-again - **Phying News:** https://phying.com/item/9301