A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.
Protect mutable objects by making them private. Restrict access to the getter and setter as well.
Our security experts can help you identify and remediate CWE-607 vulnerabilities in your codebase.
Get Security Assessment