CWE-1107
Insufficient Isolation of Symbolic Constant Definitions
The source code uses symbolic constants, but it does not sufficiently place the definitions of these constants into a more centralized or isolated location.
Impactr finds and proves whether CWE-1107 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.