CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
Impactr finds and proves whether CWE-1188 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.