CWE-273
Improper Check for Dropped Privileges
The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
Impactr finds and proves whether CWE-273 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.