CWE-495—Private Data Structure Returned From A Public Method

名称

Private Data Structure Returned From A Public Method

描述

The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.

常见后果

范围：

Integrity

影响：

Modify Application Data

注释：

The contents of the data structure can be modified from outside the intended scope.

相关 CWE

• CWE-664Improper Control of a Resource Through its Lifetime