CWE-499: Serializable Class Containing Sensitive Data

The code contains a class with sensitive data, but the class does not explicitly deny serialization.

A kind of CWE-668 Exposure of Resource to Wrong Sphere.

From the CWE List. © The MITRE Corporation.

Newest

• born05 craftcms plugin - two-factor authentication, two-factor authentication +1 more CraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure CVE-2024-5657 Fix available 3.7 LowJune 6, 2024
• gocd GoCD server secret encryption/decryption key leaked to agents during material serialization CVE-2022-39309 4.9 MediumOctober 14, 2022