KO
English
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語Insecure deserialization
Concept
Insecure deserialization is a vulnerability in which an application deserializes untrusted data without validation, which can let attackers run arbitrary code or read private data.
| Type | Concept |
|---|
Articles about Insecure deserialization (2)
- .NET 공급망 보안 강화: NuGet 종속성 관리를 위한 모범 사례
· Mirko Peters
팟캐스트에 다시 오신 것을 환영합니다. 이번 심층 분석 블로그 글에서는 엔터프라이즈 소프트웨어 보안을 계속 살펴보면서, 최근 현대 엔지니어링에서 가장 중요한 격전지 중 하나로 조용히 떠오른 주제를 다룹니다. 바로 애플리케이션 종속성 관리입니다. … - Securing the .NET Supply Chain: Best Practices for Managing NuGet Dependencies
· Mirko Peters
Welcome back to the podcast and our ongoing exploration of enterprise software security. In this deep-dive companion blog post, we are expanding on a topic that has…
Community wiki
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.
Sources
- Feed for this topic (RSS): entity/insecure-deserialization/feed.xml
- Articles on this topic: 2
Maintained by Mirko Peters (Microsoft MVP) · Last updated: