The shutdown API calls `process.exit(0)` on POST without any authentication or authorization checks. Any party that can reach this endpoint can terminate the server process, causing immediate service disruption. Affected files: route.js Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| app | ||
| i18n | ||
| lib | ||
| mitm | ||
| models | ||
| shared | ||
| sse | ||
| store | ||
| dashboardGuard.js | ||
| proxy.js | ||
| server-init.js | ||