The product sends non-cloned mutable data as an argument to a method or function.
Pass in data which should not be altered as constant or immutable.
Clone all mutable data before passing it into an external function . This is the preferred mitigation. This way, regardless of what changes are made to the data, a valid copy is retained for use by the class.
Our security experts can help you identify and remediate CWE-374 vulnerabilities in your codebase.
Get Security Assessment