CWE-637
Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
The product uses a more complex mechanism than necessary, which could lead to resultant weaknesses when the mechanism is not correctly understood, modeled, configured, implemented, or used.
Impactr finds and proves whether CWE-637 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.