CWE-582
Array Declared Public, Final, and Static
The product declares an array public, final, and static, which is not sufficient to prevent the array's contents from being modified.
Impactr finds and proves whether CWE-582 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.