CWE-248 — Uncaught Exception
CWE-248: Uncaught Exception
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
An exception is thrown from a function, but it is not caught.
When an exception is not caught, it may cause the program to crash or expose sensitive information.
Common consequences
- Availability, Confidentiality: DoS: Crash, Exit, or Restart, Read Application Data
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/248.html
- CWE list: https://cwe.mitre.org/data/index.html