Skip to content
DemoReal data from our own test repository, cernis-intelligence/agentcernis-webhook-test. A PR review that found a SQL injection replays on a loop, sped up. Nothing here is saved.Back to the siteGet started
Agent Cernis
highhigh confidenceCWE-306broken access controlOpen· stale

Unauthenticated PII disclosure: GET /users returns user IDs and emails without any auth

server.js:6

No write-up in this demo

The demo export carries full write-ups only for the SQL injection and the express advisory. This finding shows what the scan stored: title, location and severity.

Unauthenticated PII disclosure: GET /users returns user IDs and emails without any auth (demo) · Agent Cernis