CWE-768
Incorrect Short Circuit Evaluation
The product contains a conditional statement with multiple logical expressions in which one of the non-leading expressions may produce side effects. This may lead to an unexpected state in the program after the execution of the conditional, because short-circuiting logic may prevent the side effects from occurring.
Impactr finds and proves whether CWE-768 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.