CWE-913

Improper Control of Dynamically-Managed Code Resources

High

Description

The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

Potential Impact

How to Fix

Implementation

For any externally-influenced input, check the input against an allowlist of acceptable values.

Implementation

Refactor the code so that it does not need to be dynamically managed.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-913 vulnerabilities in your codebase.

Get Security Assessment