CWE-270
Privilege Context Switching Error
The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
Impactr finds and proves whether CWE-270 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.