CWE-348
Use of Less Trusted Source
The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.
Impactr finds and proves whether CWE-348 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.