CWE-236
Improper Handling of Undefined Parameters
The product does not handle or incorrectly handles when a particular parameter, field, or argument name is not defined or supported by the product.
Impactr finds and proves whether CWE-236 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.