A vulnerability categorized as critical has been discovered in Apache Causeway up to 3.4.0/4.0.0-M1. This affects an unknown part of the component URL Parameter Handler. The manipulation results in deserialization.
This vulnerability was named CVE-2025-64408. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
