CWE-350
Reliance on Reverse DNS Resolution for a Security-Critical Action
The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.
Impactr finds and proves whether CWE-350 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.