CVE Catalog
CVE-2014-9515
CriticalSummary
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.
Risk Assessment
Attackers may exploit this vulnerability to execute arbitrary code remotely, posing a serious security threat to the system.
Recommendation
It is recommended to update Dozer to the latest version to mitigate this vulnerability and review the code to minimize reflection-related risks.
Original NVD description (English source)
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.