CWE-396
Declaration of Catch for Generic Exception
Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.
Impactr finds and proves whether CWE-396 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.