CWE-109Variant

Struts: Validator Turned Off

Draft in the CWE catalog · 0 CVEs mapped

CVEs mapped

What it is

Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.

The record

Technical detail

CWE ID: CWE-109
Abstraction: Variant
Structure: Simple
Status: Draft

References (1)

https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf