CWE-1265
Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
The product invokes code that is believed to be reentrant, but the code performs a call that unintentionally produces a nested invocation of the non-reentrant code.
Impactr finds and proves whether CWE-1265 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.