CWE-495 Private Data Structure Returned From A Public Method

variant

The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-29868US——
Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced imag…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan