CWE-109
Struts: Validator Turned Off
Automatic filtering via a Struts bean has been turned off, which disables the Struts Validator and custom validation logic. This exposes the application to other weaknesses related to insufficient input validation.
Impactr finds and proves whether CWE-109 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.