CWE-508
Non-Replicating Malicious Code
Non-replicating malicious code only resides on the target system or product that is attacked; it does not attempt to spread to other systems.
Impactr finds and proves whether CWE-508 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.