Improperly Controlled Modification of Dynamically-Determined Object Attributes

Properties

id: d3f:CWE-915

name
Improperly Controlled Modification of Dynamically-Determined Object Attributes
definition
The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.
synonyms
AutoBinding
synonyms
Mass Assignment
synonyms
PHP Object Injection
json

Neighbors

CWE-915 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Hierarchy

(filtered)

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.