CWE-492
Use of Inner Class Containing Sensitive Data
Inner classes are translated into classes that are accessible at package scope and may expose code that the programmer intended to keep private to attackers.
Impactr finds and proves whether CWE-492 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.