Struts: Erroneous validate() Method - Revision history

KirstenS at 22:55, 7 April 2009

2009-04-07T22:55:27Z

KirstenS at 00:46, 18 February 2009

2009-02-18T00:46:30Z

KirstenS at 00:34, 6 November 2008

2008-11-06T00:34:06Z

KirstenS at 00:02, 1 October 2008

2008-10-01T00:02:06Z

Weilin Zhong: Contents provided by Fortify.

2006-07-24T18:15:43Z

Contents provided by Fortify.

Weilin Zhong at 19:37, 16 June 2006

2006-06-16T19:37:29Z

New page

{{Template:Vulnerability}}

==Description==

==Examples ==

==Related Threats==

==Related Attacks==

==Related Vulnerabilities==

==Related Countermeasures==

==Categories==

{{Template:Stub}}

[[Category:Input Validation Vulnerability]]

[[Category:Struts]]

← Older revision		Revision as of 22:55, 7 April 2009
Line 3:		Line 3:
	#REDIRECT [[Improper Data Validation]]		#REDIRECT [[Improper Data Validation]]

−
−	~~__TOC__~~
−
−
−	~~[[ASDR Table of Contents]]~~

	Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''		Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

@@ Line 1: / Line 1: @@
-{{Template:Vulnerability}}
+{{template:CandidateForDeletion}}
-{{Template:Fortify}}
 __TOC__
@@ Line 9: / Line 11: @@
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
@@ Line 67: / Line 67: @@
 __NOTOC__

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
+__TOC__
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
-[[ASDR Table of Contents]]
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
@@ Line 74: / Line 75: @@
 [[Category:Code Snippet]]
 [[Category:Implementation]]

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-==Abstract==
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
 ==Description==
 The Struts Validator uses a form's code>validate() method to check the contents of the form properties against the constraints specified in the associated validation form. That means the following classes have a validate() method that is part of the validation framework:
@@ Line 21: / Line 29: @@
 Disabling the validation framework for a form exposes the application to numerous types of attacks. Unchecked input is the root cause of vulnerabilities like cross-site scripting, process control, and SQL injection. Although J2EE applications are not generally susceptible to memory corruption attacks, if a J2EE application interfaces with native code that does not perform array bounds checking, an attacker may be able to use an input validation mistake in the J2EE application to launch a buffer overflow attack.
-==Related Threats==
+==Risk Factors==
-==Related Vulnerabilities==
+==References==
-==Related Countermeasures==
+TBD
-[[:Category:Input Validation]]
+__NOTOC__
 [[Category:Input Validation Vulnerability]]
 [[Category:Struts]]