CWE-277
Insecure Inherited Permissions
A product defines a set of insecure permissions that are inherited by objects that are created by the program.
Impactr finds and proves whether CWE-277 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.