CWE-385
Covert Timing Channel
Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
Impactr finds and proves whether CWE-385 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.