CWE-1056
Invokable Control Element with Variadic Parameters
A named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.
Impactr finds and proves whether CWE-1056 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.