CWE-403
Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.
Impactr finds and proves whether CWE-403 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.