CWE-421
Race Condition During Access to Alternate Channel
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
Impactr finds and proves whether CWE-421 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.