CVE-2022-34856

...

CVE-2022-46734

...

CVE-2012-3619

...

CVE-2020-2061

...

CVE-2020-26314

...

CVE-2024-5886

...

CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure

Impact ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's...