Known Vulnerabilities in REST List Parameter 1.4.2