CWE-437
Incomplete Model of Endpoint Features
A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.
Impactr finds and proves whether CWE-437 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.