CWE-778
Insufficient Logging
When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.
Impactr finds and proves whether CWE-778 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.