CWE-202
Exposure of Sensitive Information Through Data Queries
When trying to keep information confidential, an attacker can often infer some of the information by using statistics.
Impactr finds and proves whether CWE-202 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.