CWE-15
External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user.
Impactr finds and proves whether CWE-15 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.