CWE-450
Multiple Interpretations of UI Input
The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.
Impactr finds and proves whether CWE-450 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.