writeups.xyz / Weblogic RCE by only one GET request — CVE-2020–14882 Analysis

Submitter : c2a

Date: 28 October 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authentication Bypass
• Security Code Review

Programs :

• Oracle (WebLogic)

Authors :

• Nguyễn Tiến Giang (@Testanull)

Link :
https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf