CWE-767 (通过公开方法可访问到关键的私有数据) — Vulnerability Class 4

CWE-767 represents an access control weakness where a class exposes a private variable through a public method, effectively bypassing intended encapsulation boundaries. This flaw typically allows attackers to read sensitive internal state or modify critical variables with unexpected values, violating code assumptions and potentially exposing confidential data or facilitating further exploitation. Developers mitigate this risk by strictly adhering to encapsulation principles, ensuring private variables remain inaccessible outside their defining class. Instead of exposing raw variables, developers should implement controlled accessors or mutators that validate inputs and enforce business logic constraints. By limiting direct variable access and ensuring internal state integrity, organizations prevent unauthorized manipulation and maintain robust security postures against internal logic abuse.