CWE-1088
Synchronous Access of Remote Resource without Timeout
The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.
Impactr finds and proves whether CWE-1088 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.