CWE-109 Struts: Validator Turned Off

variant

Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.

parent weaknesses

Broader classes this is a kind of.

CWE-1173Improper Use of Validation Framework

source

Where this definition is published.

MITREUS

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan