Java Deserialization Vulnerability
Web Security
Like in PHP, Java also has serialization and deserialization features. Serialization is the process of converting Java objects to byte streams, which makes it easy for the objects to transfer between programmes or store them on the disk for persistence. Deserialization on the other hand, restore the objects form byte streams.