CWE-69
Improper Handling of Windows ::DATA Alternate Data Stream
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
Impactr finds and proves whether CWE-69 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.