CWE-669
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
Impactr finds and proves whether CWE-669 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.