CWE-103

Struts: Incomplete validate() Method Definition

Medium

Description

The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().

Potential Impact

Other: Unexpected State
Confidentiality: Other

How to Fix

Implementation

Implement the validate() method and call super.validate() within that method.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-103 vulnerabilities in your codebase.

Get Security Assessment