CWE-510
Trapdoor
A trapdoor is a hidden piece of code that responds to a special input, allowing its user access to resources without passing through the normal security enforcement mechanism.
Impactr finds and proves whether CWE-510 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.