Aplikacja (nieokreślona) vulnerabilities

A remote, unauthorized attacker can brute force folders and files and read them, such as private keys or configurations, making the application vulnerable to gathering sensitive information.

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.