CWE-1120: Excessive Code Complexity
Description
The code is too complex, as calculated using a well-defined, quantitative measure.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Other
Reduce Maintainability; Increase Analytical Complexity
This issue makes it more difficult to understand and/or maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
- Other
Reduce Performance
This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-1047Modules with Circular Dependencies
- CWE-1056Invokable Control Element with Variadic Parameters
- CWE-1060Excessive Number of Inefficient Server-Side Data Accesses
- CWE-1064Invokable Control Element with Signature Containing an Excessive Number of Parameters
- CWE-1075Unconditional Control Flow Transfer outside of Switch Block
- CWE-1080Source Code File with Excessive Number of Lines of Code
- CWE-1095Loop Condition Value Update within the Loop
- CWE-1119Excessive Use of Unconditional Branching
- CWE-1121Excessive McCabe Cyclomatic Complexity
- CWE-1122Excessive Halstead Complexity
- CWE-1123Excessive Use of Self-Modifying Code
- CWE-1124Excessively Deep Nesting
- CWE-1125Excessive Attack Surface
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.