CWE-651
Exposure of WSDL File Containing Sensitive Information
The Web services architecture may require exposing a Web Service Definition Language (WSDL) file that contains information on the publicly accessible services and how callers of these services should interact with them (e.g. what parameters they expect and what types they return).
Impactr finds and proves whether CWE-651 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.