Missing Authentication on updateQuestionDetails Route

[beetle-ai]

ISSUE_NUMBER: GH-3

Description

The updateQuestionDetails route in routes/questionRoutes.js lacks authentication middleware, allowing unauthorized users to modify question details.
File: repositories/QuestionBankapi/routes/questionRoutes.js
Line: 14
Severity: critical

Current Behavior

The updateQuestionDetails route is accessible without authentication.

Expected Behavior

The updateQuestionDetails route should require authentication to prevent unauthorized access.

Suggested Fix

Apply the isAuthenticated middleware to the updateQuestionDetails route.

Code Context

router.put("/updateQuestionDetails/:id", updateQuestionDetails);

Additional Notes

This is a critical security vulnerability that could allow malicious users to modify question data.

[beetle-ai]

🚀 Analyze and fix this issue with codetector-ai.

Start now →