CWE-368
Context Switching Race Condition
A product performs a series of non-atomic actions to switch between contexts that cross privilege or other security boundaries, but a race condition allows an attacker to modify or misrepresent the product's behavior during the switch.
Impactr finds and proves whether CWE-368 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.