CWE-103 — Struts: Incomplete validate() Method Definition
CWE-103: Struts: Incomplete validate() Method Definition
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().
Common consequences
- Other: Unexpected State, Varies by Context
- Confidentiality, Integrity, Availability, Other: Other
Mitigations
Implementation — Implement the validate() method and call super.validate() within that method.
References
- CWE page: https://cwe.mitre.org/data/definitions/103.html
- CWE list: https://cwe.mitre.org/data/index.html