CWE-174
Double Decoding of the Same Data
The product decodes the same input twice, which can limit the effectiveness of any protection mechanism that occurs in between the decoding operations.
Impactr finds and proves whether CWE-174 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.