CWE-706
Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
Impactr finds and proves whether CWE-706 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.