CWE-414
Missing Lock Check
A product does not check to see if a lock is present before performing sensitive operations on a resource.
Impactr finds and proves whether CWE-414 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.