Bug? Or Horrible Design? Reboot system from browser history

HarambeLives

Contributor
Joined
Jul 19, 2021
Messages
153
If I visit https://<mynas>/ui/others/reboot It will initiate a reboot of my NAS even though I never actually hit the button, as long as you are authenticated

I was busy copying data to my new NAS, and the reboot page was in my history quite a lot as I've been tweaking some things. I closed the UI, and wanted to get back in there quickly and chrome autocompleted the URL, not noticing the /reboot I clicked go, and it promptly without confirmnation rebooted the system

This must surely have ben overlooked?
 

HarambeLives

Contributor
Joined
Jul 19, 2021
Messages
153
Well I submitted a bug after I had it happen a second time. I will be more careful now, but this really shouldn't happen in my opinion


Working on a production system, this could cause a huge problem
 
Top