CWE-279
Incorrect Execution-Assigned Permissions
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.
Impactr finds and proves whether CWE-279 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.