1809
Nature Type ID Name Page
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
CWE-915: Improperly Controlled Modification of Dynamically-Determined
Object Attributes
Weakness ID : 915
Structure : Simple
Abstraction : Base
Description
The product receives input from an upstream component that specifies multiple attributes,
properties, or fields that are to be initialized or updated in an object, but it does not properly control
which attributes can be modified.
Extended Description
If the object contains attributes that were only intended for internal use, then their unexpected
modification could lead to a vulnerability.
This weakness is sometimes known by the language-specific mechanisms that make it possible,
such as mass assignment, autobinding, or object injection.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 913 Improper Control of Dynamically-Managed Code Resources 1805
ParentOf 1321 Improperly Controlled Modification of Object Prototype
Attributes ('Prototype Pollution')