CWE-807
Reliance on Untrusted Inputs in a Security Decision
The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.
Impactr finds and proves whether CWE-807 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.