CWE-1229
Creation of Emergent Resource
The product manages resources or behaves in a way that indirectly creates a new, distinct resource that can be used by attackers in violation of the intended policy.
Impactr finds and proves whether CWE-1229 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.