DerScanner
Home / Vulnerability Database / Java : Calling Thread.run()
Java

Java : Calling Thread.run()

Classification

CWE
CWE-383CWE-572

Overview

The Thread.run() method is often called by mistake instead of Thread.start() with an intent to start a new thread. Unlike Thread.start(), Thread.run() method continues running in the thread of the process that called this method.

References

  1. OWASP: Application Denial of Service
  2. Defining and Starting a Thread - docs.oracle.com
  3. Java: What’s the difference between Thread start() and Runnable run() - stackoverflow.com
  4. CWE-383
  5. CWE-572
LOW

DerScanner Severity Score

Do you want to fix Java : Calling Thread.run() in your application?

See also

Java

Java : Race condition

Java

Java : Text4Shell Vulnerability

Java

Java : JNI usage