CWE-103Variant

Struts: Incomplete validate() Method Definition

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().

The record
Technical detail
CWE ID
CWE-103
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf