CWE-104
Struts: Form Bean Does Not Extend Validation Class
AI Translation Available
If a form bean does not extend an ActionForm subclass of the Validator framework, it can expose the application to other weaknesses related to insufficient input validation.
Status
draft
Abstraction
variant
Affected Platforms
Java
Technical Details
AI Translation
Common Consequences
other
confidentiality
integrity
availability
Impacts
other
Detection Methods
automated static analysis
Potential Mitigations
Phases:
implementation
Descriptions:
•
Ensure that all forms extend one of the Validation Classes.