Description
Oracle WebLogic Server存在远程命令执行漏洞，此漏洞是对输入OpaqueReference接口的数据缺乏校验导致的。
Oracle WebLogic Server CVE-2024-20931 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://rivers.chaitin.cn/blog/cqjfldh0lnedo7thq0u0
https://www.secrss.com/articles/63583
https://www.cnblogs.com/cookiescs/p/19510019
https://www.lmboke.com/archives/oracle-weblogic-server-jndizhu-ru-lou-dong-cve-2024-20931
https://www.ctfiot.com/161026.html
https://blog.takake.com/posts/64101/
https://blog.csdn.net/A_991128a/article/details/137869548
https://www.cybersec-gd.cn/service/1808.html
https://cn-sec.com/archives/2475902.html
https://cdn.isc.360.com/isc-cxo/2024_Vulnerability_Report.pdf
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-20931-oracle-weblogic-server-rce-vulnerability
https://nvd.nist.gov/vuln/detail/cve-2024-20931
https://ccb.belgium.be/advisories/warning-proof-exploit-remote-code-execution-vulnerability-oracle-weblogic-server
https://attackerkb.com/topics/GizBcG19y2/cve-2024-20931
https://github.com/gobysec/GobyVuls/blob/master/Weblogic_ForeignOpaqueReference_remote_code_execution_vulnerability_(CVE-2024-20931).md
https://www.tenable.com/plugins/nessus/189176
https://medium.com/@vinayas23913/how-i-identified-and-exploited-an-oracle-weblogic-server-unauthenticated-remote-code-execution-f082fb95b428
https://www.fortiguard.com/encyclopedia/ips/54725
https://vuldb.com/vuln/251180
https://malware.news/t/latest-vulnerabilities-in-fortisiem-oracle-weblogic-apache-tomcat-cve-2024-23108-cve-2024-23109-cve-2024-20931-cve-2024-21733/78439
https://www.appsecure.security/vulnerability-database/cve-2024-20931/
https://firecompass.com/critical-cves-fortinet-oracle-postgresql-ws_ftp-server-and-more/
https://www.oracle.com/security-alerts/cpujan2024verbose.html
https://www.securityweek.com/oracle-weblogic-vulnerability-exploited-in-the-wild/
https://stack.watch/product/oracle/
https://www.acunetix.com/vulnerabilities/web/oracle-weblogic-remote-code-execution-via-iiop/
https://notifications.qualys.com/product/2024/02/29/february-2024-web-application-vulnerabilities-released
https://glassyamadeus.github.io/