CWE-668
Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Impactr finds and proves whether CWE-668 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.