Common Weakness Enumeration

    CWE Definition / CWE-627

    CWE-627: Dynamic Variable Evaluation

    In a language where the user can influence the name of a variable at runtime, if the variable names are not controlled, an attacker can read or write to arbitrary variables, or access arbitrary functions.

    Published:7 May 2007
    Organization:MITRE
    Modified:29 Jun 2023

    Related Weakness

    CWE-914: Improper Control of Dynamically-Identified Variables

    CWE-183: Permissive List of Allowed Inputs