Common Weakness Enumeration

CWE-607

Allowed

Public Static Final Field References Mutable Object

Abstraction: Variant · Status: Draft

A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.

0 vulnerabilities reference this CWE, most recent first.

No vulnerabilities reference this CWE.

Mitigation
Implementation

Protect mutable objects by making them private. Restrict access to the getter and setter as well.

No CAPEC attack patterns related to this CWE.