CWE-181
Incorrect Behavior Order: Validate Before Filter
The product validates data before it has been filtered, which prevents the product from detecting data that becomes invalid after the filtering step.
Impactr finds and proves whether CWE-181 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.