CWE-447
Unimplemented or Unsupported Feature in UI
A UI function for a security feature appears to be supported and gives feedback to the user that suggests that it is supported, but the underlying functionality is not implemented.
Impactr finds and proves whether CWE-447 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.