[KongchangAI]
ConceptDeserialization Vulnerability

Deserialization Vulnerability

A type of security vulnerability in which an attacker controls the input to the deserialization process to construct malicious objects, triggering magic methods or object injection and leading to harms such as remote code execution.

Timeline (last 90 days)

Oct 24

Common causes of RCE include unsafe eval(), controllable include/require paths, deserialization vulnerabilities, and execution without validation after file upload.

Unverified50%

All Facts (1)

Source Articles