Draft in the CWE catalog · 0 CVEs mapped
The product stores a non-serializable object as an HttpSession attribute, which can hurt reliability.