CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Impactr finds and proves whether CWE-426 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.