CWE-106
Struts: Plug-in Framework not in Use
When an application does not use an input validation framework such as the Struts Validator, there is a greater risk of introducing weaknesses related to insufficient input validation.
Impactr finds and proves whether CWE-106 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.