An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities. (arXiv:2208.08173v1 [cs.CR])

Nowadays, an increasing number of applications uses deserialization. This
technique, based on rebuilding the instance of objects from serialized byte
streams, can be dangerous since it can open the application to attacks such as
remote code execution (RCE) if the data to deserialize is originating from an
untrusted source. Deserialization vulnerabilities are so critical that they are
in OWASP's list of top 10 security risks for web applications. This is mainly
caused by faults in the development process of applications …

code code execution deserialization exploits exploits and vulnerabilities java study vulnerabilities