CVE-2025-64408

CVE-2025-64408 affects Apache Causeway. It is a Java deserialization vulnerability in the ViewModel flow that can allow authenticated attackers to execute arbitrary code via user-controllable URL parameters. Impact is described as remote code execution with application privileges across all curre...