Description
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Remediation
References
Related Vulnerabilities
WordPress Plugin BulletProof Security Cross-Site Scripting (.53.3)
WebLogic CVE-2018-2625 Vulnerability (CVE-2018-2625)
Joomla! Core Security Bypass (1.5.0 - 3.8.12)
WordPress Plugin WP Post Popup Directory Traversal (2.1.1)
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20901)