CWE-792
Incomplete Filtering of One or More Instances of Special Elements
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
Impactr finds and proves whether CWE-792 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.