CWE-1062 - Parent Class with References to Child Class

• Abstraction:
• Base

• Structure:
• Simple

• Status:
• Incomplete

Weakness Name

Parent Class with References to Child Class

Description

The code has a parent class that contains references to a child class, its methods, or its members.

This issue can prevent the product from running reliably. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

Common Consequences

Scope: Other

Impact: Reduce Reliability

Related Weaknesses

CWE-1061Insufficient Encapsulation

• Release Date:
• 2019-01-03

• Latest Modification Date:
• 2024-02-29

Latest Security News

Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

U.S. recovers $31 million stolen in 2021 Uranium Finance hack

Qilin ransomware claims attack at Lee Enterprises, leaks stolen data

Police arrests suspects tied to AI-generated CSAM distribution ring

Amnesty Finds Cellebrite's Zero-Day Used to Unlock Serbian Activist's Android Phone

Serbian police used Cellebrite zero-day hack to unlock Android phones

Microsoft confirms it's killing off Skype in May, after 14 years

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

MediumMissing Anti-clickjacking Header

InformationalInformation Disclosure - Suspicious Comments

MediumContent Security Policy (CSP) Header Not Set

LowCross-Domain JavaScript Source File Inclusion

HighPII Disclosure

InformationalRe-examine Cache-control Directives

InformationalModern Web Application

Top CVE List

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability

CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability

CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

Top CWE List

CWE-693 Protection Mechanism Failure

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1426 Improper Validation of Generative AI Output

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

CWE-201 Insertion of Sensitive Information Into Sent Data

CWE-1298 Hardware Logic Contains Race Conditions

CWE-1125 Excessive Attack Surface

CWE-1193 Power-On of Untrusted Execution Core Before Enabling Fabric Access Control

CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)