CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
Impactr finds and proves whether CWE-614 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.