CWE-430: Deployment of Wrong Handler
BaseIncomplete
The wrong "handler" is assigned to process an object.
View on MITREBack to CWE Lookup
Extended Description
An example of deploying the wrong handler would be calling a servlet to reveal source code of a .JSP file, or automatically "determining" type of the object even if it is contradictory to an explicitly specified type.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific