CWE-530
Exposure of Backup File to an Unauthorized Control Sphere
A backup file is stored in a directory or archive that is made accessible to unauthorized actors.
Impactr finds and proves whether CWE-530 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.