CWE-204
Observable Response Discrepancy
The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
Impactr finds and proves whether CWE-204 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.