Backend web application vulnerabilities

An unauthenticated remote attacker can perform password resets for any user with a known username and email without rate limiting.

An unauthenticated remote attacker can perform a CSRF attack on a logged-in backend user, allowing execution of multiple critical system actions such as shutting down the server or restoring an uploaded backup.

A high-privileged remote attacker can perform code injection in the backend's patch activate function, leading to code execution.

A high-privileged remote attacker can perform code injection in the backend's network auth function, leading to code execution.

An unauthenticated remote attacker can perform an XSS attack on a logged-in backend user, allowing execution of multiple critical system actions such as shutting down the server or restoring an uploaded backup.