CWE-1428
Reliance on HTTP instead of HTTPS
The product provides or relies on use of HTTP communications when HTTPS is available.
Impactr finds and proves whether CWE-1428 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.