CWE-841
Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.
Impactr finds and proves whether CWE-841 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.