CVE-2025-64408

The Apache Causeway Java rapid application development framework is vulnerable to Java deserialization of untrusted data. The root cause is the unsafe deserialization of user-controllable URL parameters within the ViewModel functionality. An authenticated attacker can exploit this to achieve remo...