Expected Findings
- Sensitive metrics are returned anonymously.
Metrics Board
Analytics Dashboard
The dashboard paints revenue and churn metrics on page load without any gating or scope reduction.
CWE-200CWE-306
Revenue panel
Primary Flows
- Metrics API Revenue, churn, and customer health
Signals
Boot Query
fetch("/api/metrics").then(renderRevenue)