Skip to content
OpenAdvisories

Weakness (CWE)

CWE-374: Passing Mutable Objects to an Untrusted Method

Base Draft

The product sends non-cloned mutable data as an argument to a method or function.

How to prevent it (2 mitigations)

  1. Implementation

    Pass in data which should not be altered as constant or immutable.

  2. Implementation

    Clone all mutable data before passing it into an external function . This is the preferred mitigation. This way, regardless of what changes are made to the data, a valid copy is retained for use by the class.

Source: MITRE CWE-374

All Critical High Medium Low Exploited only Public exploit

1 result · Feed