| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/gravitl/netmaker | < 1.2.0 | 1.2.0 |
| netmaker | < 1.2.0 | 1.2.0 |
The /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free