CWE-106Variant

Struts: Plug-in Framework not in Use

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

When an application does not use an input validation framework such as the Struts Validator, there is a greater risk of introducing weaknesses related to insufficient input validation.

The record
Technical detail
CWE ID
CWE-106
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf