CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Impactr finds and proves whether CWE-290 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.