CWE-795
Only Filtering Special Elements at a Specified Location
The product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remaining special elements that may exist before sending it to a downstream component.
Impactr finds and proves whether CWE-795 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.