The product has a critical public variable that is not final, which allows the variable to be modified to contain unexpected values.
Declare all public fields as final when possible, especially if it is used to maintain internal state of an Applet or of classes used by an Applet. If a field must be public, then perform all appropriate sanity checks before accessing the field from your code.
Our security experts can help you identify and remediate CWE-493 vulnerabilities in your codebase.
Get Security Assessment