VariantDraft

CWE-106Struts: Plug-in Framework not in Use

Category: other

Description

When an application does not use an input validation framework such as the Struts Validator, there is a greater risk of introducing weaknesses related to insufficient input validation.

Common consequences· 1

  • Integrity — Unexpected State

Potential mitigations· 4

  • [Architecture and Design]Use an input validation framework such as Struts.
  • [Architecture and Design]Use an input validation framework such as Struts.
  • [Implementation]
  • [Implementation]

References

  1. https://cwe.mitre.org/data/definitions/106.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Struts: Validator Turned Off
CWE
Struts: Form Bean Does Not Extend Validation Class
CWE
Struts: Unused Validation Form
CWE
Struts: Validator Without Form Field
CWE
Struts: Unvalidated Action Form
CWE
Struts: Form Field Without Validator
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.