CWE-791
Incomplete Filtering of Special Elements
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.
Impactr finds and proves whether CWE-791 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.