Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WebLogic Vulnerability - CVE-2020-5421 - Vulnerability Database
WebLogic

WebLogic Vulnerability - CVE-2020-5421

Medium
Reference: CVE-2020-5421
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-5421
Title: WebLogic Vulnerability
Overview:

In Spring Framework versions 5.2.0 - 5.2.8 5.1.0 - 5.1.17 5.0.0 - 5.0.18 4.3.0 - 4.3.28 and older unsupported versions the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.