Property
Languagejavascript
Severitymedium
CWECWE-918: Server-Side Request Forgery (SSRF)
OWASPA10:2021 - Server-Side Request Forgery (SSRF)
Confidence LevelLow
Impact LevelMedium
Likelihood LevelMedium

Description#

If unverified user data can reach the phantom methods it can result in Server-Side Request Forgery vulnerabilities