CWE-1299
Missing Protection Mechanism for Alternate Hardware Interface
The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.
Impactr finds and proves whether CWE-1299 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.