CWE-607: Public Static Final Field References Mutable Object

Description

A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.

Submission Date :

May 7, 2007, midnight

Modification Date :

2023-06-29 00:00:00+00:00

Organization :

MITRE

Example Vulnerable Codes

Example - 1

Here, an array (which is inherently mutable) is labeled public static final.

public static final String[] USER_ROLES;

Related Weaknesses

This table shows the weaknesses and high level categories that are related to this weakness. These relationships are defined to give an overview of the different insight to similar items that may exist at higher and lower levels of abstraction.

CWE-471: Modification of Assumed-Immutable Data (MAID)

Go to

Visit http://cwe.mitre.org/ for more details.