CWE-383
J2EE Bad Practices: Direct Use of Threads
Thread management in a Web application is forbidden in some circumstances and is always highly error prone.
Impactr finds and proves whether CWE-383 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.