CWE-540
Inclusion of Sensitive Information in Source Code
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.
Impactr finds and proves whether CWE-540 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.