CWE-285
Improper Authorization
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
Impactr finds and proves whether CWE-285 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.