PT-2018-14546

Name of the Vulnerable Software and Affected Versions Pippo version 1.11.0 Description An issue was discovered where the SerializationSessionDataTranscoder.decode function calls ObjectInputStream.readObject to deserialize a SessionData object without checking the object types. This allows an...