CWE-804
Guessable CAPTCHA
The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.
Impactr finds and proves whether CWE-804 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.