Known Vulnerabilities in REST List Parameter