CWE-780
Use of RSA Algorithm without OAEP
The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP), which might weaken the encryption.
Impactr finds and proves whether CWE-780 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.