Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WebLogic Vulnerability - CVE-2018-11039 - Vulnerability Database
WebLogic

WebLogic Vulnerability - CVE-2018-11039

Medium
Reference: CVE-2018-11039
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-11039
Title: WebLogic Vulnerability
Overview:

Spring Framework (versions 5.0.x prior to 5.0.7 versions 4.3.x prior to 4.3.18 and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.