CWE一覧に戻る
CWE-108

Struts:無効なアクションフォーム

Struts: Unvalidated Action Form
脆弱性 作成中
JA

すべてのアクションフォームは対応するバリデーションフォームを持たなければなりません。

Strutsアクションフォームマッピングがフォームを指定する場合、Struts Validatorで定義されたバリデーションフォームが必要です。

EN

Every Action Form must have a corresponding validation form.

If a Struts Action Form Mapping specifies a form, it must have a validation form defined under the Struts Validator.

Scope: Other / Impact: Other
Scope: Confidentiality, Integrity, Availability, Other / Impact: Other
Map every Action Form to a corresponding validation form.

An action or a form may perform validation in other ways, but the Struts Validator provides an excellent way to verify that all input receives at least a basic level of validation. Without this approach, it is difficult, and often impossible, to establish with a high level of confidence that all input is validated.
MITRE公式ページ — CWE-108