CWE-496
Public Data Assigned to Private Array-Typed Field
Assigning public data to a private array is equivalent to giving public access to the array.
Impactr finds and proves whether CWE-496 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.