CWE-123
Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
Impactr finds and proves whether CWE-123 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.