CWE-777
Regular Expression without Anchors
The product uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip through.
Impactr finds and proves whether CWE-777 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.