CWE-1057
Data Access Operations Outside of Expected Data Manager Component
The product uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.
Impactr finds and proves whether CWE-1057 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.