Language: Go
Label: vulnerable
CWE: CWE-613 \u2014 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Code:
func (u *UserModifyPassWordRequest) Check() (errFields []*validator.FormErrorField, err error) {
	// TODO i18n
	err = checker.CheckPassword(8, 32, 0, u.Pass)
	if err != nil {
		errField := &validator.FormErrorField{
			ErrorField: "pass",
			ErrorMsg:   err.Error(),
		}
		errFields = append(errFields, errField)
		return errFields, err
	}
	return nil, nil
}