CWE-580
clone() Method Without super.clone()
The product contains a clone() method that does not call super.clone() to obtain the new object.
Impactr finds and proves whether CWE-580 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.