CWE-839
Numeric Range Comparison Without Minimum Check
The product checks a value to ensure that it is less than or equal to a maximum, but it does not also verify that the value is greater than or equal to the minimum.
Impactr finds and proves whether CWE-839 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.