Struts: Form Field Without Validator

Opis

The product has a form field that is not validated by a corresponding validation form, which can introduce other weaknesses related to insufficient input validation.

Omitting validation for even a single input field may give attackers the leeway they need to compromise the product. Although J2EE applications are not generally susceptible to memory corruption attacks, if a J2EE application interfaces with native code that does not perform array bounds checking, an attacker may be able to use an input validation mistake in the J2EE application to launch a buffer overflow attack.

Skutki

• Integrity

  Unexpected State

• Integrity

  Bypass Protection Mechanism

  If unused fields are not validated, shared business logic in an action may allow attackers to bypass the validation checks that are performed for other uses of the form.

Zapobieganie

• Implementation

  Validate all form fields. If a field is unused, it is still important to constrain it so that it is empty or undefined.

Słabość nadrzędna

• CWE-1173 Improper Use of Validation Framework
• CWE-20 Improper Input Validation

Kiedy powstaje

• Implementation — Some products use the same ActionForm for more than one purpose. In situations like this, some fields may go unused under some action mappings.

Dotyczy

Java

Źródła

1. Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors — Katrina Tsipenyuk, Brian Chess, Gary McGraw, NIST, 2005