CWE-394
Unexpected Status Code or Return Value
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
Impactr finds and proves whether CWE-394 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.