CWE-104 — Struts: Form Bean Does Not Extend Validation Class
CWE-104: Struts: Form Bean Does Not Extend Validation Class
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | — |
Description
If a form bean does not extend an ActionForm subclass of the Validator framework, it can expose the application to other weaknesses related to insufficient input validation.
Common consequences
- Other: Other
- Confidentiality, Integrity, Availability, Other: Other
Mitigations
Implementation — Ensure that all forms extend one of the Validation Classes.
References
- CWE page: https://cwe.mitre.org/data/definitions/104.html
- CWE list: https://cwe.mitre.org/data/index.html