CWE-644
Improper Neutralization of HTTP Headers for Scripting Syntax
The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.
Impactr finds and proves whether CWE-644 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.