Content is hidden
Broken Access Control (BAC)
Information Exposure
Password Disclosure
DoS against a specific user
Authentication Bypass
Insecure Direct Object Reference (IDOR)
Directory Listing Enabled