CWE-344 (在动态变化上下文中使用不变值) — Vulnerability Class 2

CWE-344 represents a configuration weakness where a product relies on a constant value, name, or reference that fails to adapt across varying environments. This flaw typically arises when developers hardcode assumptions about network addresses, file paths, or system identifiers, assuming a static infrastructure. Attackers exploit this by manipulating the execution context or environment variables to trigger unexpected behavior, such as accessing unintended resources or bypassing security controls. For instance, a service hardcoded to listen on localhost may inadvertently expose itself if the environment changes, allowing remote exploitation. To prevent this, developers must implement dynamic configuration management, ensuring that critical values are derived from environment-specific settings rather than being statically defined. Rigorous testing across diverse deployment scenarios further helps identify and rectify these invariant dependencies before production release.