CWE-1270
Generation of Incorrect Security Tokens
The product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens generated in the system are incorrect.
Impactr finds and proves whether CWE-1270 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.