CWE-278
Insecure Preserved Inherited Permissions
A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.
Impactr finds and proves whether CWE-278 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.