Description

The web application exposes Node.js Debugger port. It's not recommended to have Node.js Debugger service publicly accessible as the debugger has full access to the Node.js execution environment and an attacker may be able to execute arbitrary javascript code.

Remediation

Disable Debugger or restrict access to it

References

Related Vulnerabilities