CWE-1230
Exposure of Sensitive Information Through Metadata
The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.
Impactr finds and proves whether CWE-1230 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.