CAPEC Related Weakness
Object Injection
CWE-502 Deserialization of Untrusted Data