CWE-1420
Exposure of Sensitive Information during Transient Execution
A processor event or prediction may allow incorrect operations (or correct operations with incorrect data) to execute transiently, potentially exposing data over a covert channel.
Impactr finds and proves whether CWE-1420 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.