supersache issues

Repositories
Issues
Comments

Results 1 issues of


                                            supersache

Security problem: Ceylon allows to build a deserialization gadget

Hello, the class org.eclipse.ceylon.compiler.java.language.SerializationProxy allows to build a very simple deserialization gadget. I'm about to submit a merge request to ysoserial (https://github.com/frohoff/ysoserial), see here: https://github.com/supersache/ysoserial/commit/a65671e06dcec9f72e57dbccd422837e1c33249d. If someone does java.io.ObjectInputStream.readObject() on...