CWE-527
Exposure of Version-Control Repository to an Unauthorized Control Sphere
The product stores a CVS, git, or other repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.
Impactr finds and proves whether CWE-527 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.