CWE-103
Struts: Incomplete validate() Method Definition
The product has a validator form that either does not define a validate() method, or defines a validate() method but does not call super.validate().
Impactr finds and proves whether CWE-103 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.