CWE-323
Reusing a Nonce, Key Pair in Encryption
Nonces should be used for the present occasion and only once.
Impactr finds and proves whether CWE-323 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.