CWE-282
Improper Ownership Management
The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.
Impactr finds and proves whether CWE-282 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.