JavaProspect: Java Deserialization - Remote Code Execution. My security partner found a vulnerability in my software which enables RCE and suggested to go for library for deserialization. Is that a good way to prevent insecure Java deserialization bugs?

Tuesday, July 12, 2022

Java Deserialization - Remote Code Execution. My security partner found a vulnerability in my software which enables RCE and suggested to go for library for deserialization. Is that a good way to prevent insecure Java deserialization bugs?

submitted by /u/MstrGiggles
[link] [comments]

from programming https://ift.tt/J52t64l

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)