Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1088: Synchronous Access of Remote Resource without Timeout

Base Incomplete

The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.

Source: MITRE CWE-1088

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2025-4656

    Vault Vulnerable to Recovery Key Cancellation Denial of Service

    Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Ent…

    HashiCorp Vault Enterprise Vault github.com/hashicorp/vault Go