Static fields should be marked final. If they are not, they may be manipulated in unexpected ways.

An object contains sensitive data but does not explicitly prohibit serialization, allowing it to be serialized through another class

An object contains sensitive data but does not explicitly prohibit serialization, allowing it to be serialized through another class

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 19 Control flow: Dead code after an if(true) return

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 17 Control flow: for loops

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 16 Control flow: while(true) and while(local_f)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 15 Control flow: switch(7)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 14 Control flow: if(IO.static_five==5) and if(IO.static_five!=5)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 13 Control flow: if(IO.static_final_five==5) and if(IO.static_final_five!=5)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 12 Control flow: if(IO.static_returns_t_or_f())

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 11 Control flow: if(IO.static_returns_t()) and if(IO.static_returns_f())

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 10 Control flow: if(IO.static_t) and if(IO.static_f)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 09 Control flow: if(IO.static_final_t) and if(IO.static_final_f)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 08 Control flow: if(private_returns_t()) and if(private_returns_f())

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 07 Control flow: if(private_five==5) and if(private_five!=5)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 06 Control flow: if(private_final_five==5) and if(private_final_five!=5)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 05 Control flow: if(private_t) and if(private_f)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 04 Control flow: if(private_final_t) and if(private_final_f)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 03 Control flow: if(5==5) and if(5!=5)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 02 Control flow: if(true) and if(false)

CWE: 497 Information Leak Sinks: leakStacktraceServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 01 Baseline

CWE: 497 Information Leak Sinks: leakPathServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 19 Control flow: Dead code after an if(true) return

CWE: 497 Information Leak Sinks: leakPathServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 17 Control flow: for loops

CWE: 497 Information Leak Sinks: leakPathServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 16 Control flow: while(true) and while(local_f)

CWE: 497 Information Leak Sinks: leakPathServlet GoodSink: no leaking BadSink : leak the path variable to the user Flow Variant: 15 Control flow: switch(7)