CWE-109—Struts: Validator Turned Off

PUBLISHEDweakness record
released 2006-07-19 · last modified 2023-06-29

Metadata

CWE ID：
CWE-109
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2023-06-29

名称

Struts: Validator Turned Off

描述

Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism

相关 CWE

browse all CWEs
相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →校验文件哈希 →