CWE-1070
Serializable Data Element Containing non-Serializable Item Elements
The product contains a serializable, storable data element such as a field or member, but the data element contains member elements that are not serializable.
Impactr finds and proves whether CWE-1070 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.