CWE-1099
Inconsistent Naming Conventions for Identifiers
The product's code, documentation, or other artifacts do not consistently use the same naming conventions for variables, callables, groups of related callables, I/O capabilities, data types, file names, or similar types of elements.
Impactr finds and proves whether CWE-1099 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.