CWE-498
Cloneable Class Containing Sensitive Information
The code contains a class with sensitive data, but the class is cloneable. The data can then be accessed by cloning the class.
Impactr finds and proves whether CWE-498 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.