CWE-913
Improper Control of Dynamically-Managed Code Resources
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
Impactr finds and proves whether CWE-913 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.