CWE-370
Missing Check for Certificate Revocation after Initial Check
The product does not check the revocation status of a certificate after its initial revocation check, which can cause the product to perform privileged actions even after the certificate is revoked at a later time.
Impactr finds and proves whether CWE-370 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.