CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Impactr finds and proves whether CWE-863 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.