CWE-379
Creation of Temporary File in Directory with Insecure Permissions
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
Impactr finds and proves whether CWE-379 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.