TrendLabs: Using Whitelisting to Remediate an RCE Vulnerability (CVE-2019-2729) in Oracle WebLogic

Figure 1. The WorkContextXmlInputAdapter class where the deserialization of WorkContextinformation is implemented
REF: https://blog.trendmicro.com/trendlabs-security-intelligence/using-whitelisting-to-remediate-an-rce-vulnerability-cve-2019-2729-in-oracle-weblogic/