CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Impactr finds and proves whether CWE-434 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.