CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session

variant

The product stores a non-serializable object as an HttpSession attribute, which can hurt reliability.

01

parent weaknesses

Broader classes this is a kind of.

02

source

Where this definition is published.

MITREUS
scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan