Weakness (CWE)
CWE-913: Improper Control of Dynamically-Managed Code Resources
Class Incomplete
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
How to prevent it (2 mitigations)
-
Implementation
For any externally-influenced input, check the input against an allowlist of acceptable values.
-
Implementation, Architecture and Design
Refactor the code so that it does not need to be dynamically managed.
Source: MITRE CWE-913
0 results · Clear filters · Feed
Nothing found.