CWE-766
Critical Data Element Declared Public
The product declares a critical variable, field, or member to be public when intended security policy requires it to be private.
Impactr finds and proves whether CWE-766 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.