CWE-453
Insecure Default Variable Initialization
The product, by default, initializes an internal variable with an insecure or less secure value than is possible.
Impactr finds and proves whether CWE-453 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.