An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

Imen Sayar, Alexandre Bartel, Eric Bodden +1

Nowadays, an increasing number of applications uses deserialization. This technique, based on rebuilding the instance of objects from serialized byte streams, can be dangerous sinc…