CWE-598
Use of HTTP Request With Sensitive Query String
The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
Impactr finds and proves whether CWE-598 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.