CWE-358
Improperly Implemented Security Check for Standard
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
Impactr finds and proves whether CWE-358 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.