CWE-705 (控制流范围控制不正确) — Vulnerability Class 2

CWE-705, Incorrect Control Flow Scoping, is a logic error where a software component fails to properly return control to the expected location after completing a task or handling an exception. This weakness typically arises from improper use of return statements, exception handling, or loop breaks, causing execution to jump to unintended code paths. Attackers exploit this by manipulating input to trigger specific conditions, allowing them to bypass security checks, execute arbitrary code, or cause denial of service by forcing the application into an unstable state. To prevent this, developers must rigorously validate control flow structures, ensuring that every conditional branch and exception handler explicitly returns control to the correct scope. Using structured programming practices, static analysis tools, and comprehensive unit testing helps identify scoping errors early, maintaining the integrity of the execution flow and preventing unauthorized state transitions.