Deserialization Attack

An attack that exploits the process of converting serialized data into objects to execute malicious code. Insecure deserialization can lead to remote code execution, privilege escalation, or denial of service. It is listed in the OWASP Top 10 and particularly affects Java, PHP, and Python applications.