CWE-687
Function Call With Incorrectly Specified Argument Value
The product calls a function, procedure, or routine, but the caller specifies an argument that contains the wrong value, which may lead to resultant weaknesses.
Impactr finds and proves whether CWE-687 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.