CWE-221
Information Loss or Omission
The product does not record, or improperly records, security-relevant information that leads to an incorrect decision or hampers later analysis.
Impactr finds and proves whether CWE-221 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.