CWE-619
Dangling Database Cursor ('Cursor Injection')
If a database cursor is not closed properly, then it could become accessible to other users while retaining the same privileges that were originally assigned, leaving the cursor dangling.
Impactr finds and proves whether CWE-619 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.