CWE-707
Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Impactr finds and proves whether CWE-707 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.