CWE-1054
Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer
The code at one architectural layer invokes code that resides at a deeper layer than the adjacent layer, i.e., the invocation skips at least one layer, and the invoked code is not part of a vertical utility layer that can be referenced from any horizontal layer.
Impactr finds and proves whether CWE-1054 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.