CWE-608—Struts: Non-private Field in ActionForm Class

PUBLISHEDweakness record
released 2007-05-07 · last modified 2025-12-11

Metadata

CWE ID：
CWE-608
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2007-05-07
更新日期：
2025-12-11

名称

Struts: Non-private Field in ActionForm Class

描述

An ActionForm class contains a field that has not been declared private, which can be accessed without using a setter or getter.

常见后果

范围：
Integrity, Confidentiality
影响：
Modify Application Data, Read Application Data

相关 CWE

browse all CWEs