CWE-617

Reachable Assertion

Medium

Description

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Potential Impact

How to Fix

Implementation

Make sensitive open/close operation non reachable by directly user-controlled data (e.g. open/close resources)

Implementation

Perform input validation on user data.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-617 vulnerabilities in your codebase.

Get Security Assessment