CWE-532
Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
Impactr finds and proves whether CWE-532 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.