writeups.xyz / Weblogic CVE-2023-21931 vulnerability exploration technique: post-deserialization exploitation

Submitter : c2a

Date: 19 April 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• Security Code Review

Programs :

• Oracle (WebLogic)

Authors :

• Goby (@GobySec)

Link :
https://github.com/gobysec/Weblogic/blob/main/Research%20on%20WebLogic%20After-Deserialization.md