CWE-108

Struts: Unvalidated Action Form

Medium

Description

Every Action Form must have a corresponding validation form.

Potential Impact

How to Fix

Implementation

Map every Action Form to a corresponding validation form. An action or a form may perform validation in other ways, but the Struts Validator provides an excellent way to verify that all input receives at least a basic level of validation. Without this approach, it is difficult, and often impossible, to establish with a high level of confidence that all input is validated.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-108 vulnerabilities in your codebase.

Get Security Assessment