CWE-104Variant

Struts: Form Bean Does Not Extend Validation Class

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

If a form bean does not extend an ActionForm subclass of the Validator framework, it can expose the application to other weaknesses related to insufficient input validation.

The record
Technical detail
CWE ID
CWE-104
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf