CWE-357
Insufficient UI Warning of Dangerous Operations
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
Impactr finds and proves whether CWE-357 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.