CWE-374Base

Passing Mutable Objects to an Untrusted Method

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product sends non-cloned mutable data as an argument to a method or function.

The record
Technical detail
CWE ID
CWE-374
Abstraction
Base
Structure
Simple
Status
Draft
References (2)
https://cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdfhttps://web.archive.org/web/20000619025001/https://www.javaworld.com/javaworld/javaqa/2000-05/03-qa-0526-pass.html