CWE-424
Improper Protection of Alternate Path
The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
Impactr finds and proves whether CWE-424 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.