CWE

CWE-248 – Uncaught Exception

rocco
Read Time:27 Second

Description

An exception is thrown from a function, but it is not caught.

When an exception is not caught, it may cause the program to crash or expose sensitive information.

Modes of Introduction:

– Implementation

 

 

Related Weaknesses

CWE-705
CWE-703
CWE-703
CWE-703

 

Consequences

Availability, Confidentiality: DoS: Crash, Exit, or Restart, Read Application Data

An uncaught exception could cause the system to be placed in a state that could lead to a crash, exposure of sensitive information or other unintended behaviors.

 

Potential Mitigations

CVE References

In,

More Stories