CWE-1385
Missing Origin Validation in WebSockets
The product uses a WebSocket, but it does not properly verify that the source of data or communication is valid.
Impactr finds and proves whether CWE-1385 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.