CWE-686
Function Call With Incorrect Argument Type
The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.
Impactr finds and proves whether CWE-686 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.