CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Impactr finds and proves whether CWE-922 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.