CWE-103

Struts: Incomplete validate() Method Definition
AI Translation Available

The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().

Status
draft
Abstraction
variant
Java

Common Consequences

other confidentiality integrity availability
Impacts
unexpected state varies by context other

Detection Methods

automated static analysis

Potential Mitigations

Phases:
implementation
Descriptions:
• Implement the validate() method and call super.validate() within that method.