Weakness (CWE)

CWE-914: Improper Control of Dynamically-Identified Variables

Base Incomplete

The product does not properly restrict reading from or writing to dynamically-identified variables.

How to prevent it (2 mitigations)

Implementation

For any externally-influenced input, check the input against an allowlist of internal program variables that are allowed to be modified.
Implementation, Architecture and Design

Refactor the code so that internal program variables do not need to be dynamically identified.

Nothing found.