CWE-499 – Serializable Class Containing Sensitive Data
Description The code contains a class with sensitive data, but the class does not explicitly deny serialization. The data can be accessed by serializing the...
Description The code contains a class with sensitive data, but the class does not explicitly deny serialization. The data can be accessed by serializing the...