CWE-694 (使用多个具有重复标识的资源) — Vulnerability Class 10

CWE-694 represents a resource management weakness where a system incorrectly assigns or handles duplicate identifiers for distinct resources in contexts demanding uniqueness. This flaw typically arises when developers fail to enforce strict identity constraints, allowing attackers to manipulate input or exploit race conditions to associate multiple resources with a single identifier. Consequently, the application may operate on the wrong resource, leading to data corruption, unauthorized access, or denial of service as the system misinterprets the intended target. To prevent this, developers must implement robust validation mechanisms that guarantee identifier uniqueness across all relevant scopes. Utilizing cryptographic hashing, database constraints, or unique key generation algorithms ensures that each resource maintains a distinct identity. Additionally, rigorous input sanitization and thorough testing for collision scenarios are essential to mitigate the risk of identifier reuse and maintain system integrity.