CWE-1083
Data Access from Outside Expected Data Manager Component
The product is intended to manage data access through a particular data manager component such as a relational or non-SQL database, but it contains code that performs data access operations without using that component.
Impactr finds and proves whether CWE-1083 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.