CWE-684
Incorrect Provision of Specified Functionality
The code does not function according to its published specifications, potentially leading to incorrect usage.
Impactr finds and proves whether CWE-684 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.