CWE-433
Unparsed Raw Web Content Delivery
The product stores raw content or supporting code under the web document root with an extension that is not specifically handled by the server.
Impactr finds and proves whether CWE-433 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.