Arbitrary Code Execution

Apache Phoenix-hive is vulnerable to arbitrary code execution attacks. The attacks can be triggered because it directly uses ObjectInputStream which deserializes the classes without validation and leads to code execution...