Common Weakness Enumeration

    CWE Definition / CWE-915

    CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes

    The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

    Published:26 Jan 2013
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-913: Improper Control of Dynamically-Managed Code Resources

    CWE-502: Deserialization of Untrusted Data