CWE-112
Missing XML Validation
The product accepts XML from an untrusted source but does not validate the XML against the proper schema.
Impactr finds and proves whether CWE-112 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.