CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Vulnerabilities
How this weakness shows up in real applications — how it works, impact, and remediation:
Impactr finds and proves whether CWE-502 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.