CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Impactr finds and proves whether CWE-862 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.