CWE-393
Return of Wrong Status Code
A function or operation returns an incorrect return value or status code that does not indicate the true result of execution, causing the product to modify its behavior based on the incorrect result.
Impactr finds and proves whether CWE-393 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.