CWE-430
Deployment of Wrong Handler
AI Translation Available
The wrong 'handler' is assigned to process an object.
Status
incomplete
Abstraction
base
Affected Platforms
Extended Description
AI Translation
An example of deploying the wrong handler would be calling a servlet to reveal source code of a .JSP file, or automatically 'determining' type of the object even if it is contradictory to an explicitly specified type.
Technical Details
AI Translation
Common Consequences
integrity
other
Impacts
varies by context
unexpected state
Potential Mitigations
Phases:
architecture and design
Descriptions:
•
Perform a type check before interpreting an object.
•
Reject any inconsistent types, such as a file with a .GIF extension that appears to consist of PHP code.