ColdFusion WDDX JNDI Injection Attempt

Tim Peck@timpeck

•updated Dec 26, 2025•6•0•91

Detects HTTP POST requests containing WDDX XML payloads that attempt to exploit a deserialization vulnerability in Adobe ColdFusion (CVE-2023-26359). The attack leverages a JNDI injection with the 'com.sun.rowset.JdbcRowSetImpl' gadget chain.