Content is hidden
Spoof HTML Content
Cache poisoning
Sensitive Data Exposure
Server-Side Request Forgery (SSRF)
Improper Access Control
Other
Broken Access Control (BAC)