CWE-224
Obscured Security-relevant Information by Alternate Name
The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.
Impactr finds and proves whether CWE-224 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.