CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Impactr finds and proves whether CWE-250 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.