CWE-941
Incorrectly Specified Destination in a Communication Channel
The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.
Impactr finds and proves whether CWE-941 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.