CWE-351
Insufficient Type Distinction
The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.
Impactr finds and proves whether CWE-351 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.