Insecure deserialization
Concept
Insecure deserialization is a vulnerability in which an application deserializes untrusted data without validation, which can let attackers run arbitrary code or read private data.
| Type | Concept |
|---|
Articles about Insecure deserialization (2)
- تأمين سلسلة توريد .NET: أفضل الممارسات لإدارة تبعيات NuGet
· Mirko Peters
أهلاً بكم مجدداً في البودكاست، ومرحباً بكم في متابعتنا المستمرة لأمن البرمجيات المؤسسية. في منشور المدونة المرافق هذا المتعمّق، نتوسع في موضوع أصبح بهدوء من أكثر ساحات المعركة أهمي - Securing the .NET Supply Chain: Best Practices for Managing NuGet Dependencies
· Mirko Peters
Welcome back to the podcast and our ongoing exploration of enterprise software security. In this deep-dive companion blog post, we are expanding on a topic that has…
Community wiki
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.
Sources
- Feed for this topic (RSS): entity/insecure-deserialization/feed.xml
- Articles on this topic: 2
Maintained by Mirko Peters (Microsoft MVP) · Last updated: