CWE-297
Improper Validation of Certificate with Host Mismatch
The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.
Impactr finds and proves whether CWE-297 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.