CWE-378
Creation of Temporary File With Insecure Permissions
Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.
Impactr finds and proves whether CWE-378 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.