CWE-688
Function Call With Incorrect Variable or Reference as Argument
The product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.
Impactr finds and proves whether CWE-688 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.