CWE-606
Unchecked Input for Loop Condition
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
Impactr finds and proves whether CWE-606 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.