CWE-838
Inappropriate Encoding for Output Context
The product uses or specifies an encoding when generating output to a downstream component, but the specified encoding is not the same as the encoding that is expected by the downstream component.
Impactr finds and proves whether CWE-838 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.