CWE-102 Struts: Duplicate Validation Forms

variant

The product uses multiple validation forms with the same name, which might cause the Struts Validator to validate a form that the programmer does not expect.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-20520UShigh7.8—
In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server with User execution privileges nee…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan