CWE-1289
Improper Validation of Unsafe Equivalence in Input
The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.
Impactr finds and proves whether CWE-1289 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.