cbcvebase.

Dream0X01 Weblogic-Framework vulnerabilities

1 known vulnerability affecting dream0x01/weblogic-framework.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-40571P2CRITICALCVSS 9.8fixed in 0.2.42023-08-25
CVE-2023-40571 [CRITICAL] CWE-502 CVE-2023-40571: weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the data returned by the server without verifying it. At
nvd
Dream0X01 Weblogic-Framework vulnerabilities | cvebase