Property
Languagego
Severitylow
CWECWE-436: Interpretation Conflict
Confidence LevelLow
Impact LevelLow
Likelihood LevelLow

Description#

Directly modifying fields of a shared ‘url.URL’ struct in Go can unintentionally alter the URL for other parts of the code that use the same reference. This can lead to unexpected or incorrect URL values being used elsewhere in your application.

Impact#

If a shared URL struct is accidentally mutated, it may result in requests being sent to the wrong endpoints, leaking sensitive data, or causing logic errors. In security-sensitive applications, this could enable attackers to redirect traffic, bypass access controls, or manipulate application behavior.