Passing Mutable Objects to an Untrusted Method

The product sends non-cloned mutable data as an argument to a method or function.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.8.

How this weakness is prevented

• Implementation: Pass in data which should not be altered as constant or immutable.
• Implementation: Clone all mutable data before passing it into an external function. This is the preferred mitigation. This way, regardless of what changes are made to the data, a valid copy is retained for use by the class.