CWE-480
Use of Incorrect Operator
The product accidentally uses the wrong operator, which changes the logic in security-relevant ways.
Impactr finds and proves whether CWE-480 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.