New vulnerability on the NVD: CVE-2014-9515

Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.

Published at: December 30, 2017 at 03:29AM