CWE-391
Unchecked Error Condition
[PLANNED FOR DEPRECATION. SEE MAINTENANCE NOTES AND CONSIDER CWE-252, CWE-248, OR CWE-1069.] Ignoring exceptions and other error conditions may allow an attacker to induce unexpected behavior unnoticed.
Impactr finds and proves whether CWE-391 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.