CWE-607
Public Static Final Field References Mutable Object
A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.
Impactr finds and proves whether CWE-607 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.