CWE-303
Incorrect Implementation of Authentication Algorithm
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
Impactr finds and proves whether CWE-303 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.