CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
Impactr finds and proves whether CWE-330 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.