SugarCRM 6.5.23 SugarRestSerialize.php PHP Object Injection

SugarCRM versions 6.5.23 and below suffer from a PHP object injection vulnerability.