CWE-708
Incorrect Ownership Assignment
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
Impactr finds and proves whether CWE-708 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.