Fiverr Inc. interview question

How do you exploit a deserialization bug