CWE-420
Unprotected Alternate Channel
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
Impactr finds and proves whether CWE-420 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.