hi SS
company cyber team is assessing my SS 5.9.2 self hosted application
they’ve traced all the endpoints exposed by the app and they’ve discovered …event-stream?channels=void&t=123…
using their tools they’ve randomly called each endpoint
they report me that when the endpoint event-stream?channels=void… is called out of an authenticated session it returns the error 401 and the following html response
<!doctype html>
<html lang="en-us">
<head>
<title>event-stream Snapshot of 8/19/2025 7:41:40 PM</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">
BODY, H1, H2, H3, H4, H5, H6, DL, DT, DD {
margin: 0;
padding: 0;
color: #444;
.....
.....
the issue is that the html contains sensitive data about the deploy of the system
cyber team classifies the issue as information disclosure vulnerability
I would like to know which is the html file between the ones in the SS templates folder.
I’ve already created custom ones for some of them and my idea is to provide my custom html file also for this scenario.
Unfortunately I cannot figure out which default html SS is using.
Could you help me?