CWE-110
Struts: Validator Without Form Field
Validation fields that do not appear in forms they are associated with indicate that the validation logic is out of date.
Impactr finds and proves whether CWE-110 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.