system
Describe <CVE-2016-5229>.
user
What is <CVE-2016-5229>?
assistant
Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization..