CWE-235
Improper Handling of Extra Parameters
The product does not handle or incorrectly handles when the number of parameters, fields, or arguments with the same name exceeds the expected amount.
Impactr finds and proves whether CWE-235 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.