CWE-102
Struts: Duplicate Validation Forms
The product uses multiple validation forms with the same name, which might cause the Struts Validator to validate a form that the programmer does not expect.
Impactr finds and proves whether CWE-102 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.