CWE-454
External Initialization of Trusted Variables or Data Stores
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
Impactr finds and proves whether CWE-454 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.