Dangling Database Cursor ('Cursor Injection')

This vulnerability typically surfaces when errors or exceptions in an application are not handled correctly, leaving the cursor open. For instance, if a function that opens a cursor throws an unhandled exception before reaching the code that closes it, the cursor remains active and 'dangles' in the database. The primary risk is that this open cursor can be exploited, often leading to SQL injection attacks. The severity depends on what the cursor was designed to do, but since it still holds its initial permissions, an attacker could potentially use it to execute unauthorized database operations or access sensitive data.