ConceptDeserialization Vulnerability
Deserialization Vulnerability
A type of security vulnerability in which an attacker controls the input to the deserialization process to construct malicious objects, triggering magic methods or object injection and leading to harms such as remote code execution.
Timeline (last 90 days)
Oct 24
Common causes of RCE include unsafe eval(), controllable include/require paths, deserialization vulnerabilities, and execution without validation after file upload.
Unverified50%