struts: input validation bypass
| Package(s): | struts | CVE #(s): | CVE-2015-0899 | ||||||||||||||||
| Created: | September 4, 2015 | Updated: | September 10, 2015 | ||||||||||||||||
| Description: | From the Red Hat bug report: The Validator in Apache Struts 1.1 and later contains a function to efficiently define rules for input validation across multiple pages during screen transitions. This function contains a vulnerability where input validation may be bypassed. When the Apache Struts 1 Validator is used, the web application may be vulnerable even when this function is not used explicitly. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||