CWE-920
Improper Restriction of Power Consumption
The product operates in an environment in which power is a limited resource that cannot be automatically replenished, but the product does not properly restrict the amount of power that its operation consumes.
Impactr finds and proves whether CWE-920 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.