This page is experimental and may change significantly in future releases.
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Properties
id: d3f:CWE-470
- name
- Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
- definition
- The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.
- synonyms
- Reflection Injection
Neighbors
CWE-470 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-470 has no related weaknesses in this release.