TL;DR: End state of many chains: command injection, deserialisation, SSTI, file upload, dependency RCE. Track as a bug class to reason about impact.
Stub — to be filled in.
What it is
TODO
Preconditions / where it applies
TODO
Technique
TODO
Detection and defence
TODO
References