Insecure serialization and deserialization for Visualforce pages

Overview

With Winter '24, to prevent unauthorized serialization and deserialization across packaging namespaces, Salesforce will validate the JsonAccess annotation of your Apex classes. This validation protects your Apex classes from unauthorized serialization and deserialization across packaging namespaces.

Business Impact

Increased risk of data breaches, financial loss, and reputational harm. Eroding customer trust and confidence.

Resources

Very Rare

Incidence

How common is this issue?
1%1%
arrow down0%
lower

Exposure

How long do organizations remain exposed before fixing the problem?
4 months1 month
arrow down62%
shorter
BenchmarkWith Clayton

Frameworks

TrustediconSecureiconOrganizational SecurityiconAuthorizationicon