CWE-230
Improper Handling of Missing Values
The product does not handle or incorrectly handles when a parameter, field, or argument name is specified, but the associated value is missing, i.e. it is empty, blank, or null.
Impactr finds and proves whether CWE-230 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.