CWE-304
Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.
Impactr finds and proves whether CWE-304 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.