CWE-520
.NET Misconfiguration: Use of Impersonation
Allowing a .NET application to run at potentially escalated levels of access to the underlying operating and file systems can be dangerous and result in various forms of attacks.
Impactr finds and proves whether CWE-520 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.