CVE-2023-40571

Summary

CVE-2023-40571 is a deserialization vulnerability affecting weblogic-framework versions 0.2.3 and below. The tool, used for detecting Weblogic vulnerabilities, fails to verify the integrity of data packets returned from servers. Malicious serialized data, when received in response to the 'echo' command, can lead to remote code execution. This is due to the classloader's handling of numerous deserialization calls. Version 0.2.4 has been released with the necessary patch to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.