CWE-506
Embedded Malicious Code
The product contains code that appears to be malicious in nature.
Impactr finds and proves whether CWE-506 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.