CWE-1023
Incomplete Comparison with Missing Factors
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
Impactr finds and proves whether CWE-1023 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.