CWE-594
J2EE Framework: Saving Unserializable Objects to Disk
When the J2EE container attempts to write unserializable objects to disk there is no guarantee that the process will complete successfully.
Impactr finds and proves whether CWE-594 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.