Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.
Ensure that an action form mapping enables validation. Set the validate field to true.
Our security experts can help you identify and remediate CWE-109 vulnerabilities in your codebase.
Get Security Assessment