CWE-689
Permission Race Condition During Resource Copy
The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.
Impactr finds and proves whether CWE-689 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.