CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Impactr finds and proves whether CWE-362 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.