CWE-491—Public cloneable() Method Without Final ('Object Hijack')

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-491
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Public cloneable() Method Without Final ('Object Hijack')

描述

A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.

常见后果

范围：
Integrity, Other
影响：
Unexpected State, Varies by Context

相关 CWE

browse all CWEs