CWE-471
Modification of Assumed-Immutable Data (MAID)
The product does not properly protect an assumed-immutable element from being modified by an attacker.
Impactr finds and proves whether CWE-471 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.