CWE-311
Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.
Impactr finds and proves whether CWE-311 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.