Glossary
Deserialization Attack
An attack that exploits how an application reconstructs, or 'deserializes,' data from a stored or transmitted format back into objects, by supplying maliciously crafted serialized data that triggers unintended code execution. Insecure deserialization is listed among the OWASP Top 10 web application security risks.