CWE-1285
Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
Impactr finds and proves whether CWE-1285 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.