CWE-628
Function Call with Incorrectly Specified Arguments
The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.
Impactr finds and proves whether CWE-628 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.