CWE-157
Failure to Sanitize Paired Delimiters
The product does not properly handle the characters that are used to mark the beginning and ending of a group of entities, such as parentheses, brackets, and braces.
Impactr finds and proves whether CWE-157 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.