CX Deserialization_of_Untrusted_Data @ src/main/java/org/owasp/webgoat/lessons/deserialization/InsecureDeserializationTask.java [main]

[dimihycks]

Deserialization_of_Untrusted_Data issue exists @ src/main/java/org/owasp/webgoat/lessons/deserialization/InsecureDeserializationTask.java in branch main

The serialized object token processed in completed in the file src\main\java\org\owasp\webgoat\lessons\deserialization\InsecureDeserializationTask.java at line 49 is deserialized by readObject in the file src\main\java\org\owasp\webgoat\lessons\deserialization\InsecureDeserializationTask.java at line 60.Similarity ID: -1257086398

Severity: High

CWE:502

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 49

---

Code (Line #49):

public AttackResult completed(@RequestParam String token) throws IOException {

---

[dimihycks]

Issue still exists.