DerScanner
Home / Vulnerability Database / Java : Correctness nonfinal public static field
Java

Java : Correctness nonfinal public static field

Classification

CWE
CWE-500

Overview

The public field has atribute static, but hasn’t final. This could be changed by malicious code or by accident from another package.

References

  1. Class Modifier - Oracle
  2. CWE-500
MEDIUM

DerScanner Severity Score

Do you want to fix Java : Correctness nonfinal public static field in your application?

See also

Java

Java : Race condition

Java

Java : Text4Shell Vulnerability

Java

Java : JNI usage