CWE-286
Incorrect User Management
The product does not properly manage a user within its environment.
Impactr finds and proves whether CWE-286 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.