Insecure Deserialization
1-minute read
What it is
Insecure Deserialization happens when an application trusts data it receives without checking it properly.
Why it matters
Attackers can change that data to control how the application behaves or gain unauthorised access.
How to reduce risk
- Avoid trusting user-provided data
- Validate data before processing it
- Limit what actions data can trigger