CWE-179
Incorrect Behavior Order: Early Validation
The product validates input before applying protection mechanisms that modify the input, which could allow an attacker to bypass the validation via dangerous inputs that only arise after the modification.
Impactr finds and proves whether CWE-179 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.