VariantDraft
CWE-110Struts: Validator Without Form Field
Category: other
Description
Validation fields that do not appear in forms they are associated with indicate that the validation logic is out of date.
Common consequences· 1
- Other — OtherIt is critically important that validation logic be maintained and kept in sync with the rest of the application. Unchecked input is the root cause of some of today's worst and most common software security problems. Cross-site scripting, SQL injection, and process control vulnerabilities all stem from incomplete or absent input validation.
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.