CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
Impactr finds and proves whether CWE-602 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.