CWE-615
Inclusion of Sensitive Information in Source Code Comments
While adding general comments is very useful, some programmers tend to leave important data, such as: filenames related to the web application, old links or links which were not meant to be browsed by users, old code fragments, etc.
Impactr finds and proves whether CWE-615 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.