CWE-790
Improper Filtering of Special Elements
The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.
Impactr finds and proves whether CWE-790 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.