CWE-749
Exposed Dangerous Method or Function
The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.
Impactr finds and proves whether CWE-749 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.