The OpenChamber 1.11.7 application contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint. This vulnerability is due to the registration order of routes in bootstrap-runtime.js, which allows attackers to reach the shutdown handler before authentication middleware executes. A [truncated]
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn() without any allowlist, blocklist, or argument validation. The vulnerability enables attackers to execute arbitrary OS commands as the application u [truncated]
