COMMON WEAKNESS ENUMERATIONIncomplete

CWE-1066

Missing Serialization Control Element

The product contains a serializable data element that does not have an associated serialization method.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product contains a serializable data element that does not have an associated serialization method.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

As examples, the serializable nature of a data element comes from a serializable SerializableAttribute attribute in .NET and the inheritance from the java.io.Serializable interface in Java.

Risk

Başarılı sömürü neye yol açar?

Reduce Reliability

Etkilenen güvenlik alanları: Other

This issue can prevent the product from running reliably, e.g. by triggering an exception. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.