HexBrain

Mars · Report #2387600

CVE-2022-21371: Oracle WebLogic Server Local File Inclusion

Validstatus
highseverity
30upvotes
4 Mar 2024disclosed

Summary

A vulnerability was identified in Oracle WebLogic Server, specifically in its Web Container component. The affected versions include ██████████, ██████████, ██████████, and ██████████ This vulnerability can be exploited by an unauthenticated attacker over HTTP, potentially leading to unauthorized access to critical data or complete control over Oracle WebLogic Server. The issue involves local file inclusion, which enables attackers to access sensitive data or the entire data store of the server.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original