2017-12-29 22:00:00
mitre
PUBLISHED
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.