CWE-207
Observable Behavioral Discrepancy With Equivalent Products
The product operates in an environment in which its existence or specific identity should not be known, but it behaves differently than other products with equivalent functionality, in a way that is observable to an attacker.
Impactr finds and proves whether CWE-207 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.