CWE-173
Improper Handling of Alternate Encoding
The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.
Impactr finds and proves whether CWE-173 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.