Skip to content
OpenAdvisories

Weakness (CWE)

CWE-102: Struts: Duplicate Validation Forms

Variant Incomplete

The product uses multiple Struts validation forms with the same name.

How to prevent it (1 mitigation)

  1. Implementation

    The DTD or schema validation will not catch the duplicate occurrence of the same form name. To find the issue in the implementation, manual checks or automated static analysis could be applied to the xml configuration files.

Source: MITRE CWE-102

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2022-20520

    In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of pri…

    Android