Jan Rodríguez

Deserialization of untrusted data allows an unauthorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object, which can be exploited if the input is not properly validated.