CWE-820
Missing Synchronization
The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.
Impactr finds and proves whether CWE-820 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.