CWE-109
Struts: Validator Turned Off
AI Translation Available
Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.
Status
draft
Abstraction
variant
Affected Platforms
Java
Technical Details
AI Translation
Common Consequences
access control
Impacts
bypass protection mechanism
Potential Mitigations
Phases:
implementation
Descriptions:
•
Ensure that an action form mapping enables validation. Set the validate field to true.