CWE-612
Improper Authorization of Index Containing Sensitive Information
The product creates a search index of private or sensitive documents, but it does not properly limit index access to actors who are authorized to see the original information.
Impactr finds and proves whether CWE-612 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.