CWE-797
Only Filtering Special Elements at an Absolute Position
The product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. byte number 10), thereby missing remaining special elements that may exist before sending it to a downstream component.
Impactr finds and proves whether CWE-797 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.