CWE-177
Improper Handling of URL Encoding (Hex Encoding)
The product does not properly handle when all or part of an input has been URL encoded.
Impactr finds and proves whether CWE-177 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.