CWE-234
Failure to Handle Missing Parameter
If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a variable number of arguments could be exhausted in a function as well.
Impactr finds and proves whether CWE-234 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.