CWE-1117
Callable with Insufficient Behavioral Summary
The code contains a function or method whose signature and/or associated inline documentation does not sufficiently describe the callable's inputs, outputs, side effects, assumptions, or return codes.
Impactr finds and proves whether CWE-1117 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.