How to allow object deserialization in Java JDK 21?
I am working on a vulnerable web application which I am integrating with Spring Boot to demonstrate Log4J vulnerability. My vulnerable web application works with my exploit on JDK 1.8. However, the exploit fails when I switch to JDK 21.