CWE-774
Allocation of File Descriptors or Handles Without Limits or Throttling
The product allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violation of the intended security policy for that actor.
Impactr finds and proves whether CWE-774 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.