CWE-1275
Sensitive Cookie with Improper SameSite Attribute
The SameSite attribute for sensitive cookies is not set, or an insecure value is used.
Impactr finds and proves whether CWE-1275 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.