CWE-110 Struts: Validator Without Form Field

Validation fields that do not appear in forms they are associated with indicate that the validation logic is out of date.

• Other: Other — It is critically important that validation logic be maintained and kept in sync with the rest of the application. Unchecked input is the root cause of some of today's worst and most common software security problems. Cross-site scripting, SQL injection, and process control vulnerabilities all stem from incomplete or absent input validation.

• Automated Static Analysis: To find the issue in the implementation, manual checks or automated static analysis could be applied to the XML configuration files. • Manual Static Analysis: To find the issue in the implementation, manual checks or automated static analysis could be applied to the XML configuration files.