CWE-597
Use of Wrong Operator in String Comparison
The product uses the wrong operator when comparing a string, such as using == when the .equals() method should be used instead.
Impactr finds and proves whether CWE-597 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.