CWE-608—Struts: Non-private Field in ActionForm Class

PUBLISHEDweakness record

released 2007-05-07 · last modified 2025-12-11

Metadata

CWE ID:: CWE-608
Abstraction:: Variant
Structure:: Simple
Status:: Draft
Release Date:: 2007-05-07
Latest Modification Date:: 2025-12-11

Weakness Name

Struts: Non-private Field in ActionForm Class

Description

An ActionForm class contains a field that has not been declared private, which can be accessed without using a setter or getter.

Common Consequences

Scope:: Integrity, Confidentiality
Impact:: Modify Application Data, Read Application Data

Related Weaknesses

browse all CWEs