Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the getSerializer method in RedisConfiguration in the Spring Redis component. When no custom serializer is configured, an attacker able to publish to a subscribed Redis channel can send a crafted...