CWE-495— Private Data Structure Returned From A Public Method

The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.— MITRE CWE catalog

1 active CVE classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-495page 1 of 1

CVE-2025-29868MEDIUMCVSS 6.5EG 6.5
2025-04-01
Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the ima…

Map vulnerabilities like CWE-495 to your infrastructure

EchelonGraph correlates every CVE — across CWE-495 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →