CWE-495: Private Data Structure Returned From A Public Method
Filter
The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.
What the weakness is: CWE-495 at MITRE. All weaknesses
Ask an AI about CWE-495
Show the prompt
Explain CWE-495: Private Data Structure Returned From A Public Method and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/495.html and https://cve.bz/cve/cwe/495?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.5CVE-2025-29868EPSS 1.0%
Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the ima…