CWE-549
Missing Password Field Masking
The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.
Impactr finds and proves whether CWE-549 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.