by Kastro
Paper/Archive/CVE-2023-40571

CVE-2023-40571

dream0x01 weblogic-framework — weblogic-framework Deserialization of Untrusted Data vulnerability

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.9.729 × 2014.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the data returned by the server without verifying it. At the same time, the classloader loads a lot of deserialization calls. In this case, the malicious serialized data returned by the server will cause remote code execution. Version 0.2.4 contains a patch for this issue.

Affected

ProductAffectedFixed inSource
weblogic-framework< 0.2.4–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/dream0x01/weblogic-framework/security/advisories/GHSA-hjwj-4f3q-44h3refgithub.com/dream0x01/weblogic-framework/releases/tag/v0.2.4