Remote Code Execution Through Deserialisation

hazelcast is susceptible to remote code execution through deserialization. An attacker can send a malicious JoinRequest through which it reaches a listening Hazelcast instance if the vulnerable class is in the classpath, subsequently causing deserialization and remote code execution.