CWE-360
Trust of System Event Data
Security based on event locations are insecure and can be spoofed.
Impactr finds and proves whether CWE-360 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.