Insecure deserialisation

Processing untrusted serialised data in a way that lets an attacker alter application logic or run code.

Covers unsafe processing of untrusted serialised data. Failure to verify the integrity of code, updates and data more generally is Software and data integrity failures.

Scheme

• Technologies and capabilities

Broader terms

• Vulnerabilities