CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Impactr finds and proves whether CWE-319 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.